Government Webinar: Improving Security Compliance with IT Monitoring Tools

@solarwinds
Improving Security Compliance with IT
Monitoring Tools
June 27, 2019

@solarwinds 2
Introductions
© 2019 SolarWinds Worldwide, LLC. All rights reserved.
Rich Roberts
SolarWinds
Sr. Federal Sales Engineer
rich.roberts@solarwinds.com
703.386.2650 (office)
Corey Smith
DH Technologies
Dept. of Commerce Account Manager
corey@dhtech.com
(571) 577-8802

@solarwinds 3
• SolarWinds overview
• DH Technologies overview
• Compliance overview
• SolarWinds® product compliance features
• Demonstrations
• Q&A
• Additional resources
Agenda

@solarwinds 4
SolarWinds at a Glance
1. Customers are defined as individuals or entities that have an active subscription for our subscription products or that have purchased one or more of our perpetual license products since our inception under a unique customer identification number. We may have multiple
purchasers of our products within a single organization, each of which may be assigned a unique customer identification number and deemed a separate customer.
2. IDC defined Network Management Software functional market, IDC’s Worldwide Semiannual Software Tracker, October 2018.
3. Source: Gartner, Market Share Analysis: ITOM: Performance Analysis Software, Worldwide, 2017. July 9, 2018. (AIOps/ITIM/Other Monitoring Tools Software Market ). SolarWinds term, Systems Management, refers to the AIOps/ITIM/Other Monitoring Tools Software
Market Taxonomy referenced in the Gartner report. All statements in this report attributable to Gartner represent SolarWinds interpretation of data, research opinion or viewpoints published as part of a syndicated subscription service by Gartner, Inc., and have not been
reviewed by Gartner. Each Gartner publication speaks as of its original publication date (and not as of the date of this [presentation]). The opinions expressed in Gartner publications are not representations of fact and are subject to change without notice.
#1
in Network
Management2
300,000+
customers in 190
countries 1
50+
IT management
products
22,000+ MSPs serving
450,000+ organizations
Every branch of the DoD, and
nearly every civilian and
intelligence agency
150,000+ registered members of THWACK®, our global IT community
Founded in 1999
More than 2,500
employees globally
Austin, TX, headquarters
Herndon, VA, government office
30+ offices globally
Leader
in remote monitoring
and management
#4
in Systems
Management3
Growing security
portfolio
499 of
Fortune 500®

@solarwinds 5
Building Great Products That Simply Work Is at Our Core
End User-Driven Product Strategy With a Constantly Growing OfferingFocused on Ease and Efficiency
Geekbuilt®
Roadmap driven by end-users and products developed by
IT Professionals who understand today’s IT environment
Massive User Community
150K+ registered THWACK members; in 2017,
THWACK averaged over 7,000 daily unique visitors
22K+ MSPs access the MSP Institute
and Customer Success Center
Solve clearly identified problems
Orion®
Platform
Hybrid IT
management
Application
Management
Affordable full-stack
monitoring for hybrid and
cloud-native IT
environments
SolarWinds
MSP
Remote monitoring
and management
platforms, backup,
and email security
Easy to try, find, and buy
Ready to use
Security
Security, simplified

@solarwinds 6
Our Approach to ProductOurCorePrinciplesNotableExamples
Simple and
powerful
Deliver complete
visibility for hybrid IT
Grow with our
customers
Enable application-
centric management
•Quick value after install
•Seamless UX across
product portfolio
•Native support of the major
on-premises and public clouds
•Unified, integrated experience
•Start small, solve the first
problem, and be ready for
the next
•Add new capabilities quickly
• AppStack™ – manage the entire
app, not just components
• PerfStack™ – real-time
troubleshooting across the
modern app and infrastructure
stack
• NetPath™ – manage the network, not
just elements
• Cloud Infrastructure Monitoring –
AWS® and Azure® infrastructure
monitoring
•Support management of
traditional and modern apps
• Network Insight™ – deep
visibility for the modern
network stack across
performance and
configuration
• AppInsight™ – deep visibility
for packaged application
performance
• Increased scale – support for
400,000 NPM elements in a
single instance
• Simplified multi-product
installer – single installer to
automatically resolve upgrade
and install dependencies

EMERGING TECHNOLOGY PROVIDER
Corey Smith – Dept. of Commerce Account Manager
(571) 577-8802

NOTEWORTHY SOLUTIONS
ARTIFICIAL
INTELLIGENCE
CONVERGED
PLATFORMS
VIRTUAL
DESKTOP
SOFTWARE DEFINED
NETWORKING
CLOUD
BACKUP &
DATA PROTECTION
MULTIFACTOR
AUTHENTICATION
DISASTER RECOVERY

AWARDS & CONTRACTSNASA SEWP V Contract
NNG15SC70B
Federal Taxpayer
ID:46-2576255
Group C
Cage Code: 6XKC9
DUNS Number: 078815475
GSA SCHEDULE
GS-35F-388CA
Federal Taxpayer lD:
46-2576255
Cage Code: 6XKC9
DUNS Number: 078815475
HUBZone Certified
DH Tech, an
emerging technology
provider, is a certified HUBZone
small business
in Leesburg, Virginia
ISO/IEC 20243:2015
Nutanix Federal Partner of theYear 2014, 2015
NVIDIA Federal Partner of theYear 2016, 2017
VirginiaChamber of Commerce Fantastic 50, 2017

P H O N E
E M A I L
S A L E S T E A M
M A R K E T I N G T E A M
703.592.6309x115
contracts@dhtech.com
C O N T R A C T S T E A M
C O M P A N Y I N F O R M AT I O N
Founded: 2013
HQ: Leesburg, VA
DUNS: 078815475
703.592.6309
sales@dhtech.com
703.592.6309x106
marketing@dhtech.com
P H O N E
E M A I L
P H O N E
E M A I L
Cage Code: 6XKC9
GSA: GS-35F-388CA
SEWP V ID:
NNG15SC70B

@solarwinds 11
Configuration Management and Auditing Support
• Configuration management tools can help inventory network
device configurations, assess them for compliance, and automate
change and configuration management
• Baselines can identify out-of-compliance configurations
• Configuration management tools can help implement
configuration of security controls and help ensure effectiveness
• Many infrastructure monitoring and management tools also
produce audit documentation and reports
• Compliance reporting helps document progress and highlight
areas that require corrective action

@solarwinds
Make security simple, powerful, and affordable
The SolarWinds Approach to Security
Asset management
Business environment
Governance
Risk assessment
Risk-management strategy
Access control
Awareness training
Data and security protection
Processes and procedures
Patch management
Vulnerability assessment
Anomalies and events
Continuous security monitoring
Recovery planning
Learning and improvement
System restoration
Communications
Response planning
Incident response
Communications
Analysis
Mitigations
“Framework Resources,” NIST. https://www.nist.gov/image/framework-01png (Accessed March 2019)

@solarwinds
SolarWinds Security Products Overview
Identify Protect Detect Respond Recover
Patch Manager
Windows® and third-party patching, asset inventory, and reporting
Security Event Manager
SIEM tool for threat detection, incident response, and compliance reporting
Patch Manager
Patch compromised systems
Access Rights Manager
Manage and audit user access rights across your infrastructure
Sever Configuration Monitor
HW and SW asset inventory
Detect unauthorized changes
View previous configurations
Network Configuration Manager
Automates management of network configurations and helps ensure compliance and backup status
User Device Tracker
Detect and locate rogue users and devices on your network
NetFlow Traffic Analyzer
Find suspicious network activity
Serv-U MFT
Secure file transfer and sharing
Backup
Easy web-based backups
Backup
Restore data and systems
Threat Monitor
SaaS-based threat detection, incident response, and compliance reporting

@solarwinds 14
Automated network configuration, change, and compliance
Network Configuration Manager
• Automated change management to push approved, standardized config changes to devices
• Maintain policy compliance using continuous configuration auditing and remediation
• Monitor configurations to detect and reverse unwanted config changes
• Automated config backups help restore operations
• Monitor and audit network devices from a single view
• Automate compliance management with config reporting and policy violation scans
• National Vulnerability Database integration provides access to current CVE’s to identify
vulnerabilities in your Cisco devices
• Leverage centralized administration to prevent unauthorized access, delegate who can view
device details and make configuration changes, and determine when network changes can occur

@solarwinds
Detect and respond to security threats using a powerful, affordable, easy-to-use SIEM tool
Security Event Manager Overview
• Real-time event correlation from network devices,
servers, applications, and more for rapid detection of
malicious activity
• Active Response actions to respond to threats, including
killing processes, detaching USB devices, and logging
users off
• Real-time log stream with fast search and filtering
within a new HTML5 interface
• Out-of-the-box compliance rules and reports for
standards, such as FISMA, STIGs, HIPPA, and PCI DSS
• Threat intelligence: Monitor for bad IP addresses known
for ransomware, malware, and phishing in your logs
• File integrity monitoring: Identify suspicious activity
taking place on sensitive files and directories

@solarwinds
Other SolarWinds Products Compliance Features
• Utilize NOC view to support continuous monitoring
• Trend utilization for capacity planning
• Track multicast or firewall port discards
• Monitor network health and availability
• Identify protocol latency delays
• Produce audit documentation and reports
Network Performance
Monitor
• Automate patching of Microsoft® and third-party applications
• Schedule patches for minimum downtime
• Inventory software and physical components per server or workstation
Patch Manager
• Improve security posture and mitigate insider threats
• Demonstrate compliance
• Easily manage user permissions
• Enhance productivity
Access Rights
Manager
• Track system and application changes, even if they were made offline
• Create configuration baselines and compare configurations over time
• View and report on hardware and software inventories
Server Configuration
Monitor
16© 2019 SolarWinds Worldwide, LLC. All Rights Reserved.

@solarwinds 17
Compliance Resources
• Review a blog on how SolarWinds software can help with NIST FISMA/RMF compliance:
https://thwack.solarwinds.com/community/solarwinds-community/product-blog/blog/2015/08/01/fisma-nist-800-53-
compliance-with-solarwinds-products
• Review a blog on how SolarWinds software can help with DISA STIGs compliance:
https://thwack.solarwinds.com/community/solarwinds-community/product-blog/blog/2011/09/07/disa-stig-
compliance-with-log-event-manager
• Review a blog on how SolarWinds software can help with implementing CIS Critical Security Controls:
https://thwack.solarwinds.com/community/solarwinds-community/product-blog/blog/2017/08/18/solarwinds-and-cis-
critical-security-controls
• Watch a federal security compliance video:
http://www.solarwinds.com/resources/videos/solarwinds-federal-security-compliance.html
• Download a compliance white paper:
http://go.solarwinds.com/Compliance_LEM_16?Program=999&c=70150000000qf3c
• Download a continuous monitoring white paper:
http://go.solarwinds.com/fedcyberWP?=70150000000Plgf
© 2019 SolarWinds Worldwide, LLC. All Rights Reserved.

@solarwinds 18
Product Pages and Other Resources
• Product Pages Network Configuration Manager
Security Event Manager
Patch Manager
Access Rights Manager
Server Configuration Monitor
• View a topics page on NIST FISMA Compliance with Continuous Monitoring Tools
• View a SEM topics page on IT compliance management
• View a SEM use case on HIPAA compliance for IT
• Read a KBA on NCM compliance policy reports
Let us know how we can help you

@solarwinds
Q&A
20
Contact SolarWinds Federal Sales:
877.946.3751
federalsales@solarwinds.com
Contact DH Technologies Sales:
703.592.6309
sales@dhtech.com

@solarwinds 21
Additional Resources
Let us know how we can help you
• Visit our THWACK government group: http://thwack.com/government
• Watch a short demo video: http://demo.solarwinds.com/sedemo/
• Download a free trial: http://www.solarwinds.com/downloads/
• Visit our government website: http://www.solarwinds.com/federal
• Call SolarWinds government sales: 877.946.3751
• Email SolarWinds federal government sales: federalsales@solarwinds.com
• Call DH Technologies sales: 703.592.6309
• Email DH Technologies : sales@dhtech.com
• Follow us on LinkedIn®: https://www.linkedin.com/company/solarwinds-government

@solarwinds
The SolarWinds, SolarWinds & Design, Orion, and THWACK trademarks are
the exclusive property of SolarWinds Worldwide, LLC or its affiliates, are
registered with the U.S. Patent and Trademark Office, and may be
registered or pending registration in other countries. All other SolarWinds
trademarks, service marks, and logos may be common law marks or are
registered or pending registration. All other trademarks mentioned herein
are used for identification purposes only and are trademarks of (and may be
registered trademarks) of their respective companies.

Government Webinar: Improving Security Compliance with IT Monitoring Tools

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Government Webinar: Improving Security Compliance with IT Monitoring Tools

Similar to Government Webinar: Improving Security Compliance with IT Monitoring Tools (20)

More from SolarWinds

More from SolarWinds (16)

Recently uploaded

Recently uploaded (20)

Government Webinar: Improving Security Compliance with IT Monitoring Tools

Editor's Notes