ArcSight Inc., a leading provider of compliance and security management solutions that protect enterprises and government agencies, has announced its new EnterpriseView Partner Programme.
According to the company, customers want to move beyond traditional security monitoring and get more information about who is on the network, what information they are seeing, and which actions they are taking with that information. This business-level view represents the next generation of the SIEM industry.
As a part of the programme, ArcSight and its EnterpriseView partners are expected to bring to market joint solutions that will enable customers to move to next-generation security solutions. These solutions will focus on understanding users, data and applications at a deep level and then on tying these areas together to monitor risk and manage operations in real time. ArcSight EnterpriseView partners will provide expertise and products in the areas of users, data and applications, while ArcSight will provide expertise and products that connect these areas and correlate events across them.
"We're launching the EnterpriseView programme because it's not enough anymore to just understand what's happening with your security devices," said Reed Henry, senior vice president of marketing and business development at ArcSight. "Customers today need to do more than look at firewall logs; they really need to protect their critical business processes by understanding the business-level context of how data is being used. We believe that the combination of products from ArcSight and our EnterpriseView partners will create solutions that provide complete visibility into users, the information they see, and the actions they take."
The ArcSight EnterpriseView programme has three partner categories:
- IdentityView partners provide user-intelligence products that enable organisations to build a complete picture of users, roles and rights. Partners include Aveksa, SailPoint and UpperVision.
- DataView partners offer products that focus on what is happening to data, including activities within databases and on preventing data leakage. Partners include Application Security, Guardium, Imperva, Reconnex and Tizor.
- AppView partners provide products that analyse application activity for fraud detection and compliance purposes. Partners include Greenlight Technologies and Radware.
These partners complement the interfaces and product integrations that ArcSight has already delivered with a wide range of SAP and Oracle products by adding real-time monitoring to business processes and governance.
"Given the volume of log data captured in today's enterprises, it can be overwhelming to get a clear picture of specific areas of the IT infrastructure," said Jon Oltsik, senior analyst at the Enterprise Strategy Group. "As a leader in compliance and security management solutions, ArcSight recognised this requirement and is now delivering a series of partnerships, products and programmes to meet it. EnterpriseView combines the best of ArcSight with the best from leading partners to provide actionable, detailed data analysis in areas such as identity management, database systems and applications."
The EnterpriseView programme allows partners and ArcSight to integrate their technologies and leverage ArcSight core capabilities to correlate real-time events, asset business value and users and their roles and entitlements to their physical and IP addresses.
ArcSight and its partners will independently or jointly market solutions that take advantage of multiple products. The EnterpriseView programme will enable partners to identify new sales opportunities and close them more easily and efficiently. Customers are expected to benefit by being able to purchase solutions that solve higher-level business problems. They will also have the confidence that all elements will work together to provide a comprehensive view of what their users are doing on their networks.
"With the increased volumes of data enterprises are responsible for, safeguarding that data has emerged as a critical business process that requires a clear understanding of users accessing that data. Combining the database scanning and monitoring capabilities in DbProtect with the event correlation abilities of ArcSight enables customers to increase the security of their valuable business data," says Eric T. Gonzales, co-founder and director of business development and strategic partnerships, Application Security, Inc. "We are excited to join the EnterpriseView programme and to work with ArcSight to solve customer business problems relating to key users, data and applications."
"The combination of access governance technologies like Aveksa with access enforcement monitoring technologies like ArcSight provides customers with a proactive approach for monitoring, managing, and mitigating access-related business and compliance risks while ensuring sustainable compliance," said Deepak Taneja, CTO and president of Aveksa.
"Guardium's industry-leading database security platform provides comprehensive visibility from multiple DBMS platforms, enterprise applications and data centre locations into a single centralised repository. The ability to correlate this information, as well as database security-related events, with ArcSight's global view of network and system activity provides a high level of user activity monitoring across the enterprise," said Upesh Patel, vice president of business development of Guardium. "We've chosen to team with ArcSight and become a DataView partner to help our customers achieve an information-centric view of security."
"Imperva SecureSphere provides organisations with full and deep visibility into both application and database activity, as well as an audit trail that associates users with the data they access and modify," said Rohit Gupta, vice president of business development for Imperva. "Through the EnterpriseView programme, joint Imperva-ArcSight customers will gain a complete picture of data security and audit-related activity in their network."
"Enterprises are expanding their use of on-line ecommerce applications to drive mission-critical business functions. Being able to understand a user's activity and transactions is paramount to enforcing security," said Yossi Vardi, vice president of business development at Radware. "The combination of Radware's Inflight application monitoring solution and ArcSight's correlation capabilities enables enterprises to monitor a user's in-session activity for multiple purposes, including user auditing, fraud detection, and compliance. We're pleased with the traction we've made with mutual customers of ArcSight, including one of the world's largest online brokerage firms."
"Customers need to know when users are viewing sensitive data. Reconnex's ability to profile and protect confidential information, combined with the correlation capabilities of ArcSight, gives our joint customers the means to better identify and protect their most valuable asset - their data," said Faizel Lakhani, vice president of products and marketing at Reconnex. "The EnterpriseView programme delivers the high-impact solutions customers demand."
"SailPoint complements ArcSight by providing powerful insights into the 'who' behind security events," said Jackie Gilbert, vice president of marketing and founder of IdentityView partner SailPoint. "By correlating security events to SailPoint's identity intelligence - business roles, access privileges, policy violations, and a patent-pending model for identifying high-risk users - the combined solution gives organisations the context to respond appropriately to any given event and better manage business risk."
"Enterprise customers have been asking for an integrated solution that can handle all types of security events quickly, easily, and with no disruption to existing systems or processes. ArcSight and Tizor address this need by providing a comprehensive and highly-scalable approach to data security and event analysis. The greater EnterpriseView Programme addresses a business-level need to understand who is seeing and handling sensitive data. We are pleased to be joining forces with ArcSight, a leader in the security event management space," said Doug Mazlish, vice president of business development at Tizor Systems.
"Customers must know who is accessing their information and their network," said Johnson Lee, vice president of engineering at UpperVision. "EnterpriseView connects UpperVision's ability to integrate and manage user identity with the leading correlation capabilities of ArcSight. We're excited to bring joint solutions to market with ArcSight."
Visit ArcSight at RSA, booth #1756, to learn more about the EnterpriseView Partner Programme.
ArcSight (NASDAQ: ARST) is a leading global provider of compliance and security management solutions that protect enterprises and government agencies. ArcSight helps customers comply with corporate and regulatory policy, safeguard their assets and processes, and control risk. The ArcSight platform collects and correlates user activity and event data across the enterprise so that businesses can rapidly identify, prioritise, and respond to compliance violations, policy breaches, cybersecurity attacks, and insider threats.