ossim - AlienVault

The control panel is our general thermometer for everything happening in the network. And we
use it to access all the monitoring tools to inspect any problem that has been identified.
For example, it can display the following:
• Constant monitoring of risk levels for the organization's main networks
• Monitoring of machines or subnetworks that surpass a security threshold
• Constant monitoring of general network, system, and service level parameters:
o Throughput and traffic on main networks
o Main database resources
o Latency of critical services
o Number of transactions of critical services
• Monitoring network or service level parameters that surpass an established threshold:
o Number of emails, viruses, and external accesses
o Latency of services, and their use of traffic
• Monitoring profiles that surpass thresholds for:
o Use of traffic
o Use of critical services
o Use of anomalous services
o Changes in configuration
o Any other anomalous activity
In our opinion, the control panel should be totally customized. Unlike all the other functions, it
will only include one sample to personalize.
25