QRadar 3.0 Enhances Threat Detection

QRadar 3.0 builds on Q1 Labs' previous success by including several new elements. An updated visual interface enhances ease of use, allowing administrators to view a graphical representation of current threats and suspicious activity in realtime on a single screen. Threats are "red-flagged" to visually alert administrators instantaneously. Administrators can also view and sort alerts by priority, drill down into an alert and launch a remedy. Historical data can compare overall network activity against current activity to determine a threat's impact, easing forensic tasks. The product's visual reporting capabilities are further enhanced by a new reporting engine, which, unlike QVision 2.0, generates custom status and history reports without a third-party report generator.

The most significant enhancements center around QRadar's new threat detection capabilities and footprint algorithms. The product can learn network activity to detect anomalies and, unlike similar products, ignores scheduled activity spikes such as backups or day-start logons.

The improved threat database includes more "threat feeds," or constant updates from third-party security event databases for more comprehensive threat protection.

Q1 Labs channel support has also improved and now includes a dedicated technical support line for solution providers. The company provides a wealth of support for partners. Field support engineers and regional sales managers participate in joint sales calls and provide installation assistance. Technical and marketing resources and sales demos are available at the vendor's dedicated Web site. Sales and hands-on technical training are also provided on-site and at Q1 Labs' headquarters. Average margin is 25 percent.

unit-1659132512259

type