EventSentry

We have been using EventSentry for several years now and are extremely happy with the product and the essential capabilities it provides for systems and network monitoring. - We use the event monitoring and syslog consolidation for all of our event and log information from both our Windows servers as well as all other servers and appliances giving us a consolidated and searchable database for security event analysis. - We use the file monitoring capabilities to track changes to important data and configuration files so that we are alerted immediately if a sensitive data or configuration file has been changed. - We use EventSentry's email notification filters to get notifications about events from the logs and other parts of the systems in real time so that we see security threats in real time across multiple areas and platforms. This provides a configurable single event stream for us to monitor. We have gotten several compliments from our penetration testing teams on our ability to monitor our network and systems. - We have found that the event log monitoring not only helps with security but knowledge about all critical application and system events has proven to be an excellent tool for monitoring and improving the stability of our servers since we can see related events from multiple servers in a single stream of email. We start every day by reviewing the latest EventSentry data to see what challenges and threats we are facing

We have been very pleased with the quality of the product, functionality and the technical support. While there may be some room to add new features like automatic agent configuration updates for workstations we have no major issues or concerns with the product.

We have been very pleased with the product and would not hesitate to recommend it to any small to medium sized company.