network security
Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 3322
Astaro Security Linux 7.5 Beta
Astaro Security Linux is an award-winning, unique network security solution in an integrated and easy-to-use and manage package. more>>
Astaro Security Linux 7.5 Beta offers you a wonderful and extremely useful product which is an award-winning, unique network security solution in an integrated and easy-to-use and manage package. Astaro Security Linux includes a combination of the following security applications:
- A Firewall with stateful packet inspection and application proxies guards Internet communications traffic in and out of the organization.
- A Virtual Private Network (VPN) gateway assures secure communications with remote offices, road warriors, and telecommuters.
- Anti-Virus defends computers from both email and web-bourne viruses.
- Intrusion Protection detects and stops hostile probes and application-based attacks.
- Spam Filtering eliminates the productivity drain of opening and deleting unsolicited emails.
- Surf Protection (Content Filtering) and Spyware Protection improve productivity by blocking inappropriate web activities, provide full protection from user tracking threats and violation of privacy.
Major Features:
- Protects all types of networks Windows, Linux, Unix and others.
- Delivers comprehensive features at low cost maximizing your ROI (return on investment).
- Highly effective. Has won numerous industry awards. Beat Cisco and Checkpoint in InfoWorld magazine product review, Beat IBM and Computer Associates in Linux World for Best Security Application.
- Integrated management platform features an intuitive browser-based interface and one-step updates for rapid deployment and easy management.
- Can be installed in under 15 minutes or purchased pre-installed on security appliances.
- Can start with firewall, VPN and spam protection and add other security applications as needed, seamlessly.
- Runs as a dedicated application server on top of a hardened operating system, which relieves operating system management headaches.
- Runs on systems ranging from small devices up to large multi-processor systems utilizing gigabytes of memory.
- Redundant systems can be configured to provide high availability and automatic failover in case of hardware or network failures.
- Load balancing improves performance - traffic shaping can set priorities by network, service and protocol.
- Logging, automatic backup, and diagnostic tools support high reliability.
- Free online evaluation workshop to get you started.
Enhancements:
- Major New Things:
- Intrusion Protection Performance
- Uses new version of the IPS engine
- Scales massively when used with Multi-Core CPU/Appliances
- Real-Time Bandwidth Monitor
- New Interface utilization bars on Dashboard (setup scale via QOS)
- Click for detailed overview as to "whats happening in my network right now"
- Import/Export Widget
- Gives the ability to work with manual lists for many features/fields
- Useful to import a large blacklist (for example) into the URL Blacklist
- Can been seen in many user-input boxes in Web, Mail and more. (Green Up/Down Arrows)
- Clone Objects
- Easily duplicate existing objects for quick re-use.
- Supported in most places for many objects (Definitions, Services, Certain Profiles/Actions)
- Extended Network Security Reporting
- Added Detailed Packet Filter/Firewall Reports
- Added Detailed IM/P2P Reports
- Reputation Support for Web Security
- Allows use of the trustedsource.org reputation for Web Filtering
- Documentation coming, for now visit their site/FAQ for more info on reputations
- DHCP Improvements
- Automatically map a current lease to a static assignment
- Limit DHCP leases to those with static assignments only
- Configurable DHCP lease time
- Servers retain configuration when enabled/disabled
- Multicast Routing Daemon
- PIM-SM Routing support
- More documentation on this implementation to come. Experiment with it and if it solves your needs.
- Other New Things:
- Windows SSL VPN Upgraded - New Client which supports X64 and many other options (download again via the UserPortal)
- Improved HTTP Caching - Increases hit/usage rates and makes the cache more effective.
- Quarantine/UserPortal Usability - Adds navigation to the bottom (supplementing the existing controls at the top), large amounts (250-1000) of displayed items per page, and sorting by subject line.
- Default Definition for "Internet" - Allows to specify "Internet" as an object which will exclude internal network(s) to aid policy creation (0.0.0.0/0 on Gateway interface)
- Customizable Shortcuts - Change the default Ctrl assignments to fit your preference
- Improved Definition/Services Sidebar - Mouseover now instantly shows full name and extended info to aid identifying desired object for drag n drop.
- User List shows static IPs - if assigned/configured (no need to edit in order to view)
- Live Log Negation - use to filter live logs to not show lines that match "-" entries i.e. -test to remove lines containing "test"
- Console/SSH Logins Trigger a notification - provides admin the needed insight when accessed.
- Instant Email Backup - Button for every created backup file which allows it to be sent immediately via email to configured addresses
- Custom text for notifications - Allows easier identification of which installation is sending the message. Especially useful if managing multiple sites using notifiers.
- Test NTP Sync - Button to immediately poll the configured NTP server
- Automatic Backup before Up2Date install
- Configurable Default for Lists - Allows for the amount of items per page (Packet Filter Rules, or anywhere there is a number amounts drop down) to have a larger default view
- Cluster/HA Serial Number View - Information on connected units made easier
- Schedule Firmware Installation - When an Up2Date for Firmware is available, you can schedule it to auto-install at a certain time (not a recurring setting)
- WebAdmin Network Section Split - Now two sections; "Network" and "Network Services" for usability.
- Search Boxes Retain Data - No need to re-enter query when returning from a drill down/result click.
- System Restart Reason - Allows logging of "why was system restarted" in the notification
- Group Tool tips for Members - Easily discern Network/Service Group members without having to edit in order to view
- Reporting Exclusions - Used to remove unwanted entries from various reports (such as Google-analytics from Web Security tables
- Log Flag for NAT Rules - Similar to packet filter, tells you which NAT rule was matched as part of traffic handling
- Masquerading for Additional IP Addresses - Allows the use of Masquerading (vs. just SNAT) for additional IPs bound to an interface
- Support for Multiple Authentication Servers - The authentication server section has been redesigned to support fallback/failover in an easier format, with many usability improvements
- SNMP MIB - Downloadable via the SNMP section of WebAdmin
- Up2date Status Reworked - Clarifies the current status of a Firmware Up2date to avoid confusion regarding the availability, download progress etc...of an issued Up2date.
- Inline/Snap Report Links - Directly moves the Admin to the relevant details report when browsing the embedded daily reports located throughout WebAdmin
- Global POP3 Sender Blacklist - Quarantined as "other" in the QM/EUP
- Dashboard RSS Feed - Provides visibility to select Astaro-issued items via WebAdmin
- Other magic features, enhancements, and usability improvements
Added: 2009-05-30 License: Free for non-commerc... Price: USD290.00
13 downloads
Other version of Astaro Security Linux
Astaro Corporation - This is an award-winning, unique network security solution. Astaro Security LinuxPrice: USD290.00
License:Free for non-commerc...
License:Free for non-commerc...
Astaro Corporation - Astaro Security Linux is an award-winning, unique network security solution in an integrated and easy-to-use and manage package. Astaro SecurityPrice: $290
License:Free for non-commercial use
License:Free for non-commercial use
Astaro Corporation - Astaro Security Linux brings you a powerful and perfect network security solution in an integrated and easy-to-use and manage package. AstaroPrice: USD290.00
License:Free for non
License:Free for non
Price: $290
License:Free for non-commercial use
License:Free for non-commercial use
Astaro Corporation - Astaro Security Linux is an award-winning, unique network security solution. Astaro Security Linux. Astaro Security Linux is an award-winningPrice: $290
License:Free for non-commercial use
License:Free for non-commercial use
FREE CompuSec PC Security Suite - Linux 4.18.1
Protects PC: Pre-boot authentication, encrypts full HDD, file, floppy &USB drive more>> FREE CompuSec is a suite of security solutions designed to completely protect desktops and notebooks. This software is a full version without any limitations and it is not a demo. The security functions that can be found in FREE CompuSec are listed below. Pre-boot Access Control requires you to enter your userID and password before the system will boot up.
Once authentication is completed, FREE CompuSec will automatically log you into the windows environment and provide a screen saver lock as well. Full Hard Disk Encryption using AES as the standard algorithm to keep your data safe. The intelligent program ensures fast encryption speeds that will minimize any effect on performance. A file encryption function is also included allowing users to secure exchange files via FTP, email attachements etc. Encryption of Floppy Disk and removable media (e.g USB thumb drives or HDD, firewire HDD etc) allows users to secure their data between their CompuSec protected PCs. Encryption of Server Files & Subdirectories - SafeLan, allows users to store and share encrypted files in a network. FREE CompuSec can be deployed as single user installation or centrally managed. With central management, the security definitions such as, password lifetime, encryption keys and user access rights can be defined centrally.
FREE CompuSec is Free from CE-Infosys. Other versions feature the use of e-Identity (a smart card or USB token) or Biometric fingerprint scanner that will complement your password and store your digital certificates, providing strong two-factor authentication and access control. FREE CompuSec can be upgraded at any time. A FREE CompuSec Window version can be downloaded @ http://www.ce-infosys.com/CeiNews_FreeCompuSec.asp
There is even Free CompuSec support at http://groups.yahoo.com/group/CompuSec<<less
Download (13.70MB)
Added: 2009-04-14 License: Freeware Price: Free
195 downloads
LIDS 2.2.3 RC1 (for kernel 2.6.21)
LIDS (Linux Intrusion Detection System) is a kernel patch and admin tools which enhances the kernels security. more>>
LIDS (Linux Intrusion Detection System) is a kernel patch and admin tools which enhances the kernels security by implementing Mandatory Access Control (MAC).
When it is in effect, chosen file access, all system network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs can access specific files.
It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security.
You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more. LIDS currently support kernel 2.6, 2.4.
<<lessWhen it is in effect, chosen file access, all system network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs can access specific files.
It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security.
You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more. LIDS currently support kernel 2.6, 2.4.
Download (0.30MB)
Added: 2007-08-15 License: GPL (GNU General Public License) Price:
801 downloads
OS-SIM 0.9.9 RC5
Ossim stands for Open Source Security Information Management. more>>
Ossim stands for Open Source Security Information Management. OS-SIMs goal is to provide a comprehensive compilation of tools which, when working together, grant a network/security administrator with detailed view over each and every aspect of his networks/hosts/physical access devices/server/etc...
Besides getting the best out of well known open source tools, some of which are quickly described below these lines, ossim provides a strong correlation engine, detailed low, mid and high level visualization interfaces as well as reporting and incident managing tools, working on a set of defined assets such as hosts, networks, groups and services.
All this information can be limited by network or sensor in order to provide just the needed information to specific users allowing for a fine grained multi-user security environment. Also, the ability to act as an IPS (Intrusion Prevention System) based on correlated information from virtually any source result in a useful addition to any security professional.
Main features:
- Arpwatch, used for mac anomaly detection.
- P0f, used for passive OS detection and os change analisys.
- Pads, used for service anomaly detection.
- Nessus, used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
- Snort, the IDS, also used for cross correlation with nessus.
- Spade, the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signature.
- Tcptrack, used for session data information which can grant useful information for attack correlation.
- Ntop, which builds an impressive network information database from which we can get aberrant behaviour anomaly detection.
- Nagios. Being fed from the host asset database it monitors host and service availability information.
- Osiris, a great HIDS.
<<lessBesides getting the best out of well known open source tools, some of which are quickly described below these lines, ossim provides a strong correlation engine, detailed low, mid and high level visualization interfaces as well as reporting and incident managing tools, working on a set of defined assets such as hosts, networks, groups and services.
All this information can be limited by network or sensor in order to provide just the needed information to specific users allowing for a fine grained multi-user security environment. Also, the ability to act as an IPS (Intrusion Prevention System) based on correlated information from virtually any source result in a useful addition to any security professional.
Main features:
- Arpwatch, used for mac anomaly detection.
- P0f, used for passive OS detection and os change analisys.
- Pads, used for service anomaly detection.
- Nessus, used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
- Snort, the IDS, also used for cross correlation with nessus.
- Spade, the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signature.
- Tcptrack, used for session data information which can grant useful information for attack correlation.
- Ntop, which builds an impressive network information database from which we can get aberrant behaviour anomaly detection.
- Nagios. Being fed from the host asset database it monitors host and service availability information.
- Osiris, a great HIDS.
Download (3.8MB)
Added: 2007-08-09 License: BSD License Price:
812 downloads
Luke Macken Security LiveCD
Luke Macken Security LiveCD provides a fully functional livecd based on Fedora for use in security auditing, forensics research. more>>
Luke Macken Security LiveCD provides a fully functional livecd based on Fedora for use in security auditing, forensics research, and penetration testing.
Main features:
- All of the security features and tools Fedora has to offer
- Features from the FedoraLiveCD
- Ability to install directly to hard drive
Spinning your own
# yum install mercurial livecd-tools
$ hg clone http://hg.lewk.org/security-livecd
# livecd-creator --config security-livecd/fedora-security-livecd.ks --fslabel=Fedora-7-Security-LiveCD
Making changes to the LiveCD is as simple as modifying the fedora-security-livecd.ks configuration file.
<<lessMain features:
- All of the security features and tools Fedora has to offer
- Features from the FedoraLiveCD
- Ability to install directly to hard drive
Spinning your own
# yum install mercurial livecd-tools
$ hg clone http://hg.lewk.org/security-livecd
# livecd-creator --config security-livecd/fedora-security-livecd.ks --fslabel=Fedora-7-Security-LiveCD
Making changes to the LiveCD is as simple as modifying the fedora-security-livecd.ks configuration file.
Download (MB)
Added: 2007-08-09 License: GPL (GNU General Public License) Price:
813 downloads
EasyIDS 0.2
EasyIDS software is an easy to install intrusion detection system configured for Snort. more>>
EasyIDS software is an easy to install intrusion detection system configured for Snort. Based upon Patrick Harpers Snort installation guide and modeled after the trixbox installation cd, EasyIDS is designed for the network security beginner with minimal Linux experience.
Enhancements:
- This version was designed around Centos 4.5 cd1.
- Snort was upgraded to 2.6.1.5.
- Barnyard 0.2 with unified output was implemented.
- A menu-driven multi-language capable Web application was added.
- Much more was done.
<<lessEnhancements:
- This version was designed around Centos 4.5 cd1.
- Snort was upgraded to 2.6.1.5.
- Barnyard 0.2 with unified output was implemented.
- A menu-driven multi-language capable Web application was added.
- Much more was done.
Download (480MB)
Added: 2007-08-01 License: GPL (GNU General Public License) Price:
815 downloads
Sussen 0.90
Sussen is a tool for testing the security posture of computers and other network devices. more>>
Sussen is a tool that checks for vulnerabilities and configuration issues on computer systems. It is based on the Open Vulnerability and Assessment Language.
<<less Download (0.39MB)
Added: 2007-07-16 License: GPL (GNU General Public License) Price:
831 downloads
jail 1.6
jail is a simple, but often useful network security tool which displays ICMP packets and attempted TCP connections. more>>
jail (Just Another IP Logger) is a simple, but often useful network security tool which displays ICMP packets and attempted TCP connections from remote hosts.
The application features better configuration and logging options than the iplogger package it was written to replace.
icmplog and tcplog can either ignore any packet, or log it at any of the
syslog levels (as defined in < syslog.h >). The log level is configurable
depending on the ICMP type (icmplog) or the port on which a connection is
requested (tcplog). The default facility (LOG_DAEMON) for logging messages
can also be changed in the configurations files.
The level at which a given type of packet is logged is specified in the
configuration files (/etc/icmplog.conf and /etc/tcplog.conf by default,
which can be overriden with the --file option). You can also specify
a default level, which matches packets that have an unknown or unconfigured
type. See the example configurations included and the icmplog(8) and
tcplog(8) manual pages for more information.
Log entries contain the source and type (icmplog) or destination port
(tcplog) of the received packet. If a packet is of an unknown type, its
numeric value is logged instead of its name. The source is logged
either as a hostname or as an IP address (see the -n option). Typical
entries look like:
Jun 16 17:47:30 lustre icmplog: started
Jun 16 17:47:31 lustre tcplog: started
Jun 16 18:54:14 lustre icmplog: time exceeded from sunsite.unc.edu
Jun 16 18:56:14 lustre tcplog: port 1039 request from ftp.cs.umn.edu
Jun 16 19:47:24 lustre icmplog: destination unreachable from 209.39.121.4
The INSTALL file contains detailed installation instructions. Read the
icmplog(8), icmplog.conf(5), tcplog(8) and tcplog.conf(5) manual pages, and
the example configuration files (icmplog.conf and tcplog.conf) for
more information on setting up and using jail.
jail was originally based on the iplogger package, but offers greater
configurability and better options. It bears very little resemblance to
the original program now.
jail is distributed under the Artistic License (a copy of which is included
in the distribution) and comes with no warranty, express or implied. If it
breaks...well, keep the pieces.
<<lessThe application features better configuration and logging options than the iplogger package it was written to replace.
icmplog and tcplog can either ignore any packet, or log it at any of the
syslog levels (as defined in < syslog.h >). The log level is configurable
depending on the ICMP type (icmplog) or the port on which a connection is
requested (tcplog). The default facility (LOG_DAEMON) for logging messages
can also be changed in the configurations files.
The level at which a given type of packet is logged is specified in the
configuration files (/etc/icmplog.conf and /etc/tcplog.conf by default,
which can be overriden with the --file option). You can also specify
a default level, which matches packets that have an unknown or unconfigured
type. See the example configurations included and the icmplog(8) and
tcplog(8) manual pages for more information.
Log entries contain the source and type (icmplog) or destination port
(tcplog) of the received packet. If a packet is of an unknown type, its
numeric value is logged instead of its name. The source is logged
either as a hostname or as an IP address (see the -n option). Typical
entries look like:
Jun 16 17:47:30 lustre icmplog: started
Jun 16 17:47:31 lustre tcplog: started
Jun 16 18:54:14 lustre icmplog: time exceeded from sunsite.unc.edu
Jun 16 18:56:14 lustre tcplog: port 1039 request from ftp.cs.umn.edu
Jun 16 19:47:24 lustre icmplog: destination unreachable from 209.39.121.4
The INSTALL file contains detailed installation instructions. Read the
icmplog(8), icmplog.conf(5), tcplog(8) and tcplog.conf(5) manual pages, and
the example configuration files (icmplog.conf and tcplog.conf) for
more information on setting up and using jail.
jail was originally based on the iplogger package, but offers greater
configurability and better options. It bears very little resemblance to
the original program now.
jail is distributed under the Artistic License (a copy of which is included
in the distribution) and comes with no warranty, express or implied. If it
breaks...well, keep the pieces.
Download (0.018MB)
Added: 2007-07-03 License: Artistic License Price:
510 downloads
UbuntuTrinux
UbuntuTrinux seeks to integrate elements of Trinux with the Debian/Ubuntu mkinitramfs infrastructure. more>>
UbuntuTrinux seeks to integrate elements (and code, where appropriate) of Trinux with the Debian/Ubuntu mkinitramfs infrastructure to allow easy development and packaging Ubuntu binary (and ultimately package and repository) compatible ramdisk distributions using recent 2.6.x kernels. As before, the most common use is network security monitoring and analysis.
Trinux: A Linux Security Toolkit was a ramdisk-based Linux distribution that was under active development from 1998-2003.
<<lessTrinux: A Linux Security Toolkit was a ramdisk-based Linux distribution that was under active development from 1998-2003.
Download (6.3MB)
Added: 2007-07-02 License: GPL (GNU General Public License) Price:
850 downloads
Linux Security Auditing Tool 0.9.6
Linux Security Auditing Tool (LSAT) is a post install security auditing tool. more>>
The Linux Security Auditing Tool (LSAT) is a post install security auditor for Linux/Unix.
Linux Security Auditing Tool checks many system configurations and local network settings on the system for common security/config errors and for packages that are not needed.
It (for now) works under Linux (x86: Gentoo, RedHat, Debian, Mandrake; Sparc: SunOS (2.x), Redhat sparc, Mandrake Sparc; Apple OS X).
Enhancements:
- The dependency on the popt library has been removed.
- This release adds extra passwd and group checks under Linux, a check for failed logins under Linux/Solaris, a check for kernel modules under Solaris, network interface stats, and routing checks. It fixes a problem in checknetforward giving false positives, and an issue where verbose output was not very consistent.
- The kernel module check under Linux has been modified.
<<lessLinux Security Auditing Tool checks many system configurations and local network settings on the system for common security/config errors and for packages that are not needed.
It (for now) works under Linux (x86: Gentoo, RedHat, Debian, Mandrake; Sparc: SunOS (2.x), Redhat sparc, Mandrake Sparc; Apple OS X).
Enhancements:
- The dependency on the popt library has been removed.
- This release adds extra passwd and group checks under Linux, a check for failed logins under Linux/Solaris, a check for kernel modules under Solaris, network interface stats, and routing checks. It fixes a problem in checknetforward giving false positives, and an issue where verbose output was not very consistent.
- The kernel module check under Linux has been modified.
Download (0.070MB)
Added: 2007-05-21 License: GPL (GNU General Public License) Price:
904 downloads
KNOPPIX-NSM 1.2
knoppix-nsm is dedicated to providing a framework for individuals wanting to learn about Network Security Monitoring. more>>
KNOPPIX-NSM is dedicated to providing a framework for individuals wanting to learn about Network Security Monitoring.
We have tryed to do most of the hard work to help get the beginner/newbie up and running fast so they spend more time learning about NSM, leaving the details as a later exercise once familiar with the concepts.
KNOPPIX-NSM is based on the ever popular Knoppix, which means that you can test all the tools in a live session running on the cd without installing to harddrive. KNOPPIX-NSM has the added bonus of be able to install to harddisk so you can deploy a NSM framework into your production network and use it for realtime monitoring.
Some of the benefits include:
Rapid sensor deployment
You can boot you sensors from the live CD, store all data to a local HD partion and have them logging back to a central server.
Complete out of channel Intrusion Detection and Analysis center
With KNOPPIX-NSM you can deploy a complete NSM network to monitor your existing network infrastructure. KNOPPIX-NSM comes pre-configured for deployment of multiple sensors and databases, all you need to do is create the sensor accounts in the database and change some passwords.
Secure
KNOPPIX-NSM has been built with security in mind. All remote communications are over ssl tunnels so that you do not have to be concerned about eaves droppers if you decide to run KNOPPIX-NSM in your main network channels. Another feature is the use of iptables to ensure that only allowed hosts can connect and only necessary services are visible to the network.
Easy console deployment
Need another console, just boot from the cd (setting the host and ip at boot time) and you are up and running straight away.
The intent of KNOPPIX-NSM is to provide a distrubtion with accompanying documentation on the tools that we have selected and how they are put together in the NSM framework.
Main features:
- all remote management over ssl/ssh,
- all tools installed, patched and ready to run,
- automated scripts for easy installation/modification,
- support for bonded network interfaces,
- based on knoppix Live CD,
- debian based when installed to harddrive,
- ease of maintenance through apt-get,
<<lessWe have tryed to do most of the hard work to help get the beginner/newbie up and running fast so they spend more time learning about NSM, leaving the details as a later exercise once familiar with the concepts.
KNOPPIX-NSM is based on the ever popular Knoppix, which means that you can test all the tools in a live session running on the cd without installing to harddrive. KNOPPIX-NSM has the added bonus of be able to install to harddisk so you can deploy a NSM framework into your production network and use it for realtime monitoring.
Some of the benefits include:
Rapid sensor deployment
You can boot you sensors from the live CD, store all data to a local HD partion and have them logging back to a central server.
Complete out of channel Intrusion Detection and Analysis center
With KNOPPIX-NSM you can deploy a complete NSM network to monitor your existing network infrastructure. KNOPPIX-NSM comes pre-configured for deployment of multiple sensors and databases, all you need to do is create the sensor accounts in the database and change some passwords.
Secure
KNOPPIX-NSM has been built with security in mind. All remote communications are over ssl tunnels so that you do not have to be concerned about eaves droppers if you decide to run KNOPPIX-NSM in your main network channels. Another feature is the use of iptables to ensure that only allowed hosts can connect and only necessary services are visible to the network.
Easy console deployment
Need another console, just boot from the cd (setting the host and ip at boot time) and you are up and running straight away.
The intent of KNOPPIX-NSM is to provide a distrubtion with accompanying documentation on the tools that we have selected and how they are put together in the NSM framework.
Main features:
- all remote management over ssl/ssh,
- all tools installed, patched and ready to run,
- automated scripts for easy installation/modification,
- support for bonded network interfaces,
- based on knoppix Live CD,
- debian based when installed to harddrive,
- ease of maintenance through apt-get,
Download (375MB)
Added: 2007-05-09 License: GPL (GNU General Public License) Price:
550 downloads
Remote Monitoring Agent 1.25
Remote Monitoring Agent (RMA) is an auxiliary application for HostMonitor. more>>
Remote Monitoring Agent (RMA in short) is an auxiliary application for HostMonitor. Enterprise license for Advanced Host Monitor already includes license for 10 installations of the agent. Holders of a Lite, Standard or Professional licenses may buy an additional license for Remote Monitoring Agent separately.
HostMonitor 4.0+ can monitor remote networks using Remote Monitoring Agents (RMA). RMA is small application that accepts requests from HostMonitor, performs test and provides information about test result back to HostMonitor.
Why you may need RMA? Here are just several reasons:
RMA increases security of the network. When you have to run the tests such as CPU Usage test or Performance Counters tests on a remote Windows system, HostMonitor must be able to log in to that system with administrators privileges. Instead you may now use an agent installed on that remote system. In this case HostMonitor will not have to log on to that system at all. HostMonitor needs just one TCP port to communicate with the RMA agent (by default it uses #1055 port, however you may set an agent to use any other port).
Remote Monitoring Agent is also a very useful tool when you have to monitor two (or many) separated networks (connected through Internet). In this case installing just one instance of RMA behind the firewall in network "A" will allow to monitor entire network "A" using the HostMonitor located in the network "B" with just one open TCP port.
RMA decreases the network traffic. E.g. frequent use of "File Integrity" or "Compare Files" tests in an array of remote systems may apply significant load on the network. The more and the bigger files you test the more traffic increase you get. RMA runs locally and sends only the test results to the HostMonitor thus decreasing the amount of network traffic.
Remote Monitoring Agent simplifies network administration. You no longer need to share local drives/folders to perform tests such as File Integrity, Folder/File Size, File Availability, Count Files, etc
RMA for Linux / BSD / Solaris allows you to perform tests that HostMonitor cannot perform. For example HostMonitor cannot monitor processes that are running on Linux systems. RMA can do that.
Main features:
- All traffic between Remote Monitoring Agents and HostMonitor is encrypted.
- It is possible to customize the list of enabled tests for each of the agents (e.g. living only Count Files and UNC tests only).
- You can restrict incoming TCP connections with the list of acceptable addresses.
- With RMA Manager you may configure, restart and even upgrade agent(s) remotely.
<<lessHostMonitor 4.0+ can monitor remote networks using Remote Monitoring Agents (RMA). RMA is small application that accepts requests from HostMonitor, performs test and provides information about test result back to HostMonitor.
Why you may need RMA? Here are just several reasons:
RMA increases security of the network. When you have to run the tests such as CPU Usage test or Performance Counters tests on a remote Windows system, HostMonitor must be able to log in to that system with administrators privileges. Instead you may now use an agent installed on that remote system. In this case HostMonitor will not have to log on to that system at all. HostMonitor needs just one TCP port to communicate with the RMA agent (by default it uses #1055 port, however you may set an agent to use any other port).
Remote Monitoring Agent is also a very useful tool when you have to monitor two (or many) separated networks (connected through Internet). In this case installing just one instance of RMA behind the firewall in network "A" will allow to monitor entire network "A" using the HostMonitor located in the network "B" with just one open TCP port.
RMA decreases the network traffic. E.g. frequent use of "File Integrity" or "Compare Files" tests in an array of remote systems may apply significant load on the network. The more and the bigger files you test the more traffic increase you get. RMA runs locally and sends only the test results to the HostMonitor thus decreasing the amount of network traffic.
Remote Monitoring Agent simplifies network administration. You no longer need to share local drives/folders to perform tests such as File Integrity, Folder/File Size, File Availability, Count Files, etc
RMA for Linux / BSD / Solaris allows you to perform tests that HostMonitor cannot perform. For example HostMonitor cannot monitor processes that are running on Linux systems. RMA can do that.
Main features:
- All traffic between Remote Monitoring Agents and HostMonitor is encrypted.
- It is possible to customize the list of enabled tests for each of the agents (e.g. living only Count Files and UNC tests only).
- You can restrict incoming TCP connections with the list of acceptable addresses.
- With RMA Manager you may configure, restart and even upgrade agent(s) remotely.
Download (0.088MB)
Added: 2007-05-09 License: Freeware Price:
904 downloads
fe3d 0.11
fe3d is a multiplatform, SDL/OpenGL based 3D visualization tool for network (security) information. more>>
fe3d is a multiplatform, SDL/OpenGL based 3D visualization tool for network (security) information, it currently supports insecure.orgs nmap and [has very very limited support for] languard XML log files.
It has been tested and runs fine on Win32, IRIX and OS X, it should also function fine on Linux.
Inside the data directory there are a couple of xml files that will allow you to somewhat modify fe3ds behaviour. Everything is pretty self explanatory, but there are some comments inside just in case, most settings dont do anything yet.
fe_config.xml - The main configuration file for the program, allowes modification of png tag for screenshots (because we all love screenshots), some graphics settings (may not work), etc.
os_info.xml - Defines the textures and objects for displaying the OS and hardware information.
<<lessIt has been tested and runs fine on Win32, IRIX and OS X, it should also function fine on Linux.
Inside the data directory there are a couple of xml files that will allow you to somewhat modify fe3ds behaviour. Everything is pretty self explanatory, but there are some comments inside just in case, most settings dont do anything yet.
fe_config.xml - The main configuration file for the program, allowes modification of png tag for screenshots (because we all love screenshots), some graphics settings (may not work), etc.
os_info.xml - Defines the textures and objects for displaying the OS and hardware information.
Download (0.36MB)
Added: 2007-05-03 License: GPL (GNU General Public License) Price:
907 downloads
Java Network Stack 1.1
Java Network Stack provides a Java library for research oriented network programming. more>>
Java Network Stack provides a Java library for research oriented network programming.
Java Network Stack is a library used by the DIMES project to create new internet measurements. It provides a clean API for packet manipulation, send, receive, filter, and analysis. It is a unification of raw socket capabilities, MAC level networkingm, and IPv6 capabilities.
<<lessJava Network Stack is a library used by the DIMES project to create new internet measurements. It provides a clean API for packet manipulation, send, receive, filter, and analysis. It is a unification of raw socket capabilities, MAC level networkingm, and IPv6 capabilities.
Download (1.5MB)
Added: 2007-04-25 License: LGPL (GNU Lesser General Public License) Price:
918 downloads
OSSIM 0704 (VMOSSIM)
OSSIM aims to unify network monitoring, security, correlation, and qualification in one single tool. more>>
OSSIM aims to unify network monitoring, security, correlation, and qualification in one single tool. The project combines Snort, BASE, NTOP, Nagios, nmap, nessus, and rrdtool to provide the user with full control over every aspect of networking or security.
Main features:
- Arpwatch, used for mac anomaly detection.
- P0f, used for passive OS detection and os change analisys.
- Pads, used for service anomaly detection.
- Nessus, used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
- Snort, the IDS, also used for cross correlation with nessus.
- Spade, the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signature.
- Tcptrack, used for session data information which can grant useful information for attack correlation.
- Ntop, which builds an impressive network information database from which we can get aberrant behaviour anomaly detection.
- Nagios. Being fed from the host asset database it monitors host and service availability information.
- Osiris, a great HIDS.
Enhancements:
- VMOSSIM is a fully working OSSIM environment packaged into a VMWare image.
- Its got most of the plugins enabled and is intended for uncomplicated and fast deployment, as well as for demonstration and testing purposes.
- It incudes a set of image management scripts not included with the main OSSIM distribution, which alleviates access to OSSIM by not-so-skilled users.
<<lessMain features:
- Arpwatch, used for mac anomaly detection.
- P0f, used for passive OS detection and os change analisys.
- Pads, used for service anomaly detection.
- Nessus, used for vulnerability assessment and for cross correlation (IDS vs Security Scanner).
- Snort, the IDS, also used for cross correlation with nessus.
- Spade, the statistical packet anomaly detection engine. Used to gain knowledge about attacks without signature.
- Tcptrack, used for session data information which can grant useful information for attack correlation.
- Ntop, which builds an impressive network information database from which we can get aberrant behaviour anomaly detection.
- Nagios. Being fed from the host asset database it monitors host and service availability information.
- Osiris, a great HIDS.
Enhancements:
- VMOSSIM is a fully working OSSIM environment packaged into a VMWare image.
- Its got most of the plugins enabled and is intended for uncomplicated and fast deployment, as well as for demonstration and testing purposes.
- It incudes a set of image management scripts not included with the main OSSIM distribution, which alleviates access to OSSIM by not-so-skilled users.
Download (MB)
Added: 2007-04-24 License: GPL (GNU General Public License) Price:
600 downloads
Secleted [ 0 ] software to compare
Copyright Notice:
Software piracy is theft, Using crack, password, serial numbers, registration codes, key generators is illegal and prevent future software development. The above network security search only lists software in full, demo and trial versions for free download. Download links are directly from our mirror sites or publisher sites, torrent files or links from rapidshare.com, yousendit.com or megaupload.com are not allowed
