One of the first steps to properly securing a network is having an overall picture of the network’s configuration. Once that picture is developed, administrators can focus on identifying potential entry points and vulnerabilities.
Ipswitch’s WhatsUp Professional, a network management solution that automatically discovers attached devices and monitors network traffic, turns the tedious, manual chore of network mapping into a hands-off, easily managed discovery process. WhatsUp Professional provides network management functionality, but security professionals can also benefit from the plethora of monitoring and reporting features. The product also offers secure remote access via SSL encryption, which proves handy for solution providers remotely monitoring client networks. The product is a good fit for solution providers managing small and medium-sized networks. Secure remote monitoring features allow for extensive managed services opportunities.
WhatsUp Professional includes comprehensive monitoring, integrated reporting, network topology identification and secure remote access. An installation wizard speeds configuration and automates the initial discovery process. Solution providers can scan a network using several methods such as an SNMP scan, IP range scan, Network Neighborhood scan and importing a pre-defined hosts file. Administrators can also scan for active network services, such as FTP, NNTP and TELNet, providing a valuable tool for detecting unauthorized services, spyware and worms. Once the detection process is complete, data is rolled into a database. For this purpose, WhatsUp Professional includes Microsoft SQL Server 2000 Desktop Engine for database hosting. Solution providers can also choose to use SQL Server’s database engine.
Discovered devices can be organized into groups based on filter settings. Networks can be partitioned by IP address, location, SNMP identification and other criteria specified by administrators to fit their needs. Device groups can be viewed in detail, through a filtered map view or by a report-generated view. Administrators have several search and management options to further filter or locate devices. Automated polling defines discovery cycles that automatically detect the status of new and existing devices, detect authentication failures and perform forensic trending. Administrators can shut down and/or reboot a device or send messages to a local user through a central management console, allowing administrators to control a compromised device or to prepare a device for a security patch. Reports include uptime and downtime analysis and event detail tracking.
Ipswitch’s multitier channel program offers resellers customized marketing and sales assistance and literature, a partner newsletter, pre- and post-sales support, product discounts and demonstration software. Ipswitch did not disclose average reseller margins.
