The
correlation engine in ArcSight ESM
helps University of Maryland
University Collage focus on
top-priority security issues, and
find network issues they were not
yet aware of.
Business
Challenge:
UMUC serves
140,000 students in a primarily
online distance-learning
environment. The IT security team is
tasked with ensuring the uptime of
the infrastructure responsible for
the e-learning environment. UMUC
also has a small security staff
which was buried in manually
reviewing thousands of security
logs.
Solution:
ArcSight
ESM helps UMUC's staff prioritize
security issues and review security
logs in an orderly, prioritized way.
"Immediately upon installing
ArcSight ESM for a pilot test we not
only saw the potential of having a
correlation engine help us focus on
the most pressing security issues,
but we gained visibility into issues
we didn't even know existed such as
high utilization rates which point
to suspicious network activity,"
said Alex Gales, Internetwork
engineering manager, UMUC.
Benefits:
ArcSight ESM
helps prioritize security incidents
and allows UMUC to re-focus the team
on core network design and
operations tasks to support the
University's growth and expansion.
Click here to get more information about ArcSight.