Toolbox
Data Center Security Tools to Not Overlook
Endpoint technologies and virtualization software get a lot of ink these days, but here's a quick look at five other key security areas addressed by data-center tools
By Rick Cook
Most of the companies in the DLP market were startups, but in the last six to nine months the big security vendors have snapped up many of the independent players in the space. Symantec now has Vontu, RSA has Tablus (now part of the RSA Data Loss Prevention Suite) and McAfee has Reconnex, he notes. "The combination of these tools backed by larger, richer and capable organizations puts these tools and these companies in a leadership position," Quin says.
Other considerations are the size of the company and the resources you have to devote to security. Quin says there are several areas where the most capable product isn't necessarily the best one for small and midsize businesses; in every case, CSOs will have to evaluate functionality versus constraints such as price and manpower requirements.
You Must Comply
Controlling access is a core aspect of data-center security management. Identity-management systems that can be set to control what legitimate users can access are now well-established, with tools like IBM's Tivoli ID Manager and Access Manager and competing products from Oracle, BMC, CA and Novell.
But an emerging part of access management is policy compliance management, which uses security policies to control access to resources, rather than looking at individual identities. Symantec's BindView and Elemental Security's Elemental Security Platform are examples.
Remember that one aspect of data-center security is that many of the tools have overlapping functions and feature sets. One analyst's log analysis tool is another's security information manager, for instance. That's likely to continue as vendors try to beef up their product lines. ##
Other stories by Rick Cook
$firstKeyword
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.



