Feature updates
"Oliver Friedrichs" <[email protected]> Wed, 3 Jul 2002 11:45:31 -0700
| Newsgroups | gmane.comp.security.aris |
|---|---|
| Message-ID | <C8396509CAD720478B0C8F723C8676A60601A1@hadies.sanmateo.securityfocus.com> |
Hello DeepSight users. By now you have noticed that we have changed the
name of the product from ARIS, to DeepSight. In addition to this name
change, we are continuing the rollout of additional features to the free
DeepSight Analyzer service. Our next set of changes will be rolled out
this evening, including:
- An "Events" screen will replace the existing "Incidents" screen. This
screen will contain a series of sub-options, designed to allow you to
view your Intrusion Detection System Events rolled up by a number of
different categories. These categories are:
- By Event Type - This will allow viewing of events rolled up=20
by unique event type
- By Destination Port - This will allow viewing of events rolled up=20
by unique destination port
- By Source Address - This will allow viewing of events rolled up=20
by unique source address
- By Source Domain - This will allow viewing of events rolled up=20
by unique source domain
- By Source Country - This will allow viewing of events rolled up=20
by unique source country
- By Source ISP - This will allow viewing of events rolled up=20
by unique source ISP
- By Logs - This will allow viewing of events rolled up=20
by the log in which they were uploaded. This
will
replace the existing upper level "Logs" tab
- A new Report Configuration Wizard will replace the existing report
configuration screen in the "Reports" section. This wizard is intended
to simplify the generation of reports, by allowing more flexible
selection of reporting criteria. This screen will consist of a series
of 6 screens, each allowing entry of reporting criteria. This screen
will contain the same functionality as present in the original report
configuration screen, with the following additions:
- The ability to specify which IDS sensors you would like to include
data from in your report
- The specification of multiple source addresses and source countries
to report on
- The specification of multiple destination addresses to report on
- The specification of multiple event categories to report on
- The specification of multiple product categories to report on
We hope you like these changes, and continue to use the DeepSight
Analyzer service. =20
One of the most commonly used existing features is the ability to
receive daily summary reports on your IDS data via email. If you have
not already done so, you can enable this feature via the "Settings" ->
"Account Settings" screen.
As always, please feel free to send any feedback to
[email protected], or to myself directly,
Thanks,
Oliver Friedrichs
Director of Engineering - DeepSight
(650) 375-5331