Voyence bridges gap between network and security device data

Voyence this week is set to make available the latest version of its software that collects change and configuration data from network and security devices and lets customers spot security holes more quickly.

VoyenceControl software now unifies network- and security-device data into one management console, the company says. The software also taps existing investments in other security products, such as RADIUS systems, to ensure device access remains intact with predefined authorization policies. For instance, the software can track which users are making changes to what security devices and when.

"If you harden the network and restrict who has access to which servers and define who can make changes to what data, you can better protect the data on those servers," says Pete Cruz, director of product marketing at Voyence. "Change management is really one of the first lines of defense in terms of protecting access to systems."

Like such competitors as AlterPoint and Opsware, Voyence collects configuration data from multiple network and security devices to maintain an accurate, up-to-date inventory of network devices and of operating system and network configuration details. The software also tracks the numerous changes that occur on any given day -- some of which may require, for example, distributing a patch to several routers and switches. This prevents potential network failure, customer-service worries and imminent security threats when unplanned and unauthorized changes cause configuration problems.

VoyenceControl includes centralized software installed on a server, as well as software distributed on other servers to support and collect data from network devices. This release has security features that strengthen device access controls by letting network managers define credentials that will be used on a global or per-network basis, the company says.

"We want to provide a flexible and open-enough application to support unique implementations," Cruz says.

Additional security enhancements include device coverage for Cisco PIX firewall and Adaptive Security Appliance gear, as well as improved support for Lightweight Directory Access Protocol authentication mechanisms.