SIMCommander - We Manage Internet Security

SIMCommander Sensor Overview

SIMCommander Sensor is combined with SIMCommander Collector and SIMC-IDS sensor for performing the network intrusion detection tasks as well as receiving events from other network and security devices. SIMCommander Sensor runs on Linux operating systems and proprietary software with the sensor engine.

Intrusion Detection

SIMCommander Sensor is capable of performing real-time traffic analysis and packet logging on IP networks. And perform protocol analysis, content searching/matching and detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, pac

ket anomaly and much more. With pre-configured rules, security administrators can perform optimal protection for the enterprise network in just a minute. SIMCommander Agent is an Agent machine that receives events from various network and security devices. SIMCommander Sensor also provides rules customization to fit enterprise specific security requirements.

Data Collection

SIMCommander Sensor collects security events and raw log data from disparate equipments such as firewalls, IDS/IPS, antivirus, routers/ switches, OS, applications and vulnerability management tools with non-invasive approach on SNMP, Syslog, ODBC and LEA format. SIMCommander Sensor also capture the payload and MAC address information to identify the root source of an incident.

Time synchronization

SIMCommander Sensor provides time synchronization capability to synchronize all monitored devices with SIMCommander Manager for providing a accurate and real-time security postures.