Hi all
I'm looking for some information on building /Planning an Enterprise
based security / auditing solution for a VLAN'ed network of approx. 200
systems.
Mostly unix, Solaris 2.6, 7 & 8. and approx. 40+ NT workstations.
What i need is a solution that provides a scalable approach that needs
to be expanded as more systems come online over the next year or so,
approx. 100 + more. All systems are within the same site. I'm mostly
after configuration and hardware info, any software ideas are also
appreciated.
so far i think a server decated to auditing(all system will send
audit data to it
another server for IDS.
Our only requirements are is has to be scalable, workable and able to be
monitored by a single person.
Any ideas or places to start?
Goody.
