Cisco - TABPI
Cisco - TABPI
Cisco - TABPI
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
NEWS&ANALYSIS<br />
Network analysis: Fast and frugal<br />
SUNBELT TOOLS CUT<br />
COSTS, SPEED TASKS<br />
By Paula Musich<br />
Sunbelt software inc.<br />
hasdeveloped a pair of administrative<br />
tools that deliver<br />
fast, inexpensive analysis<br />
of directory and network protocol<br />
issues for administrators.<br />
The Clearwater, Fla., company’s<br />
directory reporting tool<br />
works across multiple directories,<br />
including those of<br />
Novell Inc., Microsoft Corp.,<br />
IBM and Sun Microsystems<br />
Inc., as well as any LDAPenabled<br />
directory. It reports on<br />
security, integrity and com-<br />
CYBER-SECURITY FROM PAGE 1<br />
hind the center is the need<br />
to improve the government’s<br />
incident-response and information-sharing<br />
capabilities,<br />
which have come under fire<br />
in both public and private sectors,<br />
said Richard Clarke, former<br />
special adviser to the<br />
president for cyber-security,<br />
who resigned earlier this year.<br />
That criticism is likely to continue<br />
unless the department<br />
can attract a well-known security<br />
expert to run the center.<br />
“The center will never<br />
become what it should be in<br />
terms of the national locus for<br />
policy unless there’s a nationally<br />
recognized and high-level<br />
person with high-level access<br />
in the administration,” Clarke<br />
said in an interview in Boston<br />
last week. “Because otherwise<br />
people will just consider it<br />
another bureaucratic organization.<br />
It’s very key that they<br />
get the right person; very<br />
key that person has access<br />
to the president, the homeland<br />
security adviser and<br />
homeland security secretary.”<br />
For others, however, such as<br />
16 eWEEK n MAY 26, 2003<br />
pliance in enterprise directories,<br />
officials said. The Directory<br />
Inspector tool, due this<br />
week, lets directory or system<br />
managers easily answer<br />
such questions as: Where<br />
are the users? Do some users<br />
have too many security privileges?<br />
Are there unused user<br />
accounts? Are there duplicate<br />
account names?<br />
“It is a management issue<br />
when you have multiple<br />
directories,” said Alex Eckelberry,<br />
president of Sunbelt.<br />
“For companies with that<br />
hodgepodge, to be able to report<br />
on them from a single<br />
view—this lets you distill<br />
security experts in the private<br />
sector, who have accused the<br />
government of failing to<br />
respond quickly to emerging<br />
security threats and of being<br />
difficult to deal with, the choice<br />
of a leader for the national center<br />
is not as crucial.<br />
“I don’t think it’s possible<br />
Clarke: New chief will need top access.<br />
for the government to have<br />
much of an effect. The government<br />
acts in a reactive<br />
fashion,” said Eric Stromberg,<br />
senior electrical engineer at<br />
The Dow Chemical Co.,<br />
based in Wilmington, Del.<br />
complex information.”<br />
Directory Inspector, which<br />
provides Wizards to guide<br />
users through complex directory<br />
data, is priced starting<br />
at $1,295 for 500 user objects.<br />
Sunbelt’s other tool, LANhound,<br />
also due this week, cuts<br />
the cost of basic protocol<br />
analysis and network monitoring—especially<br />
for switched<br />
LANs—in a commercial-grade<br />
product. The cost to capture<br />
and analyze network protocols<br />
such as TCP/IP, NetBEUI,<br />
IPX/SPX and AppleTalk on<br />
switched networks can be<br />
high, since vendors often<br />
charge for each remote seg-<br />
“There will always be the leading<br />
issues that eventually<br />
cause government to react.<br />
But as the government is<br />
reacting to issues that were<br />
birthed yesterday, new issues<br />
are forming today.”<br />
The national center will be<br />
part of the Directorate of<br />
Information Assurance<br />
and Infrastructure Protection<br />
at the DHS, Clarke<br />
said. As a center of gravity<br />
for government information<br />
security, it will<br />
combine the functions<br />
of the National Infrastructure<br />
Protection Center,<br />
the Critical Infrastructure<br />
Assurance<br />
Office, the Federal Computer<br />
Incident Response<br />
Center and the National<br />
Communications System.<br />
As the DHS meshes<br />
the center together, members<br />
of Congress charged<br />
with overseeing the department’s<br />
cyber-security efforts<br />
are scrambling to understand<br />
how all the pieces will fit.<br />
For example, two separate<br />
House panels—the Commit-<br />
MARK ALCAREZ<br />
ment or switch port. Typical<br />
protocol analyzers can start<br />
at $1,000, plus $395 per remote<br />
agent. LANhound, which<br />
includes three remote agents<br />
for $595, could greatly reduce<br />
the cost to monitor and analyze<br />
network traffic across multiple<br />
segments.<br />
“That pricing will make a<br />
big difference,” said beta tester<br />
Erik Goldoff, systems manager<br />
at The HoneyBaked Ham Co.,<br />
in Norcross, Ga. “You are<br />
talking a factor of 10 cheaper.<br />
With LANhound, it just starts<br />
monitoring the network and<br />
shows where the protocol<br />
distribution is [and] what the<br />
network statistics are.”<br />
LANhound displays statistics<br />
in charts and bar graphs<br />
and lets users set alarms that<br />
trigger a packet capture to<br />
aid trouble-shooting. ´<br />
tee on Science and the cybersecurity<br />
subcommittee of the<br />
Select Committee on Homeland<br />
Security—have unsuccessfully<br />
sought answers to<br />
such questions as, How many<br />
resources are being devoted<br />
to cyber-security?<br />
Cyber-security is among the<br />
priorities for the Science and<br />
Technology Directorate,<br />
Charles McQueary, DHS<br />
undersecretary of the directorate,<br />
told the cyber-security<br />
subcommittee of the House<br />
Select Committee on Homeland<br />
Security at a hearing in<br />
Washington last week.<br />
McQueary said the DHS<br />
will create a technology clearinghouse,<br />
which will enable<br />
it to work in partnership<br />
with private industry.<br />
DHS officials said they are<br />
still working out the details of<br />
the national cyber-security<br />
center, including its formal<br />
name and organizational<br />
structure. ´<br />
For more on DHS,see.<br />
story,Page 33.