Unified Log Audit (ULA)

Unified Log Audit(ULA)is a new developed professional log information security audit system, which can collect, analysis and record the log data of many systems such as operation system, network device and application middleware system, enable the large and complex log data can be read, analysis management, audit, centralized storage and demonstrate, help to analysis system security events, and solve security problems.
Current situation and challenge
Nowadays in the IT information security field, the current enterprises and organizations are facing a more complex situation than ever, which not only comes from the intrusion and attack outside of the enterprise and organization, but also the violation and leak inside of the enterprise and organization.
Although log audit can help the administrators to detect many security invasion and violation behaviors, but due to this task needs a high requirement on the administrator's technical level, it is hardly to popularize, in most cases it can only be used as a service provided by professional security service company. It can be said that the current complex business network environment, even experienced security expert cannot audit network security through traditional log audit method, but has to rely on external tools to improve log audit efficiency.
Solution
According to monitor and collect the log information such as security event, access behavior, running log, running status within the information system, ULA system will take the action of standardization, filter, merge, analysis processing, and centralize storage and manage as an unified log form, make use of powerful statistical summary and related analysis tools, to provide search results and professional report, to achieve unified whole security audit to the enterprise information system.
Characteristics
Advanced architecture audit
ULA system is designed and developed based on professional security knowledge and professional analysis experience.
Comprehensive log information collection support
Support the log collection to network device, security device, host, application and database.
Support log collection methods including SYSLOG\SNMP \OPSEC\Document\XML etc.
Support both log collection methods with Agent and without Agent, to cut down the impact of the log collection to the target system.
Adopt log cache technique and mechanism to guarantee the integrity of log collection.
Security alarm
Support customized alarm policy
Support alarm methods: Email, SMS etc.
Data share
In order to facilitate the sharing of data with other systems, the system support to share the original log or the formatted log to other systems as the form of SYSLOG and SNMP.
Rich report support
Support predefined reports based on audit policy
Support customized statistical reports based on various of dimensions
Support various demonstration and export mode: PDF\Word\Excel\HTML etc.
Customer benefits
1\ Enhance the overall information security of the enterprise;
2\ Enhance enterprise management efficiency;
3\ Promote the enterprise IT systems optimization