Policy Enforcers

• Monitor compliance against a defined configuration across multiple administrative domains and OSs from a single management console;

• Query systems for configuration, user accounts, access controls, and patch and service pack levels;

• Provide multilevel reports on computer configurations, from detailed technical information to high-level roll-ups; and

• Optionally, fix discovered problems proactively.

Vendors at a Glance click to enlarge

With this model in mind we gathered seven security policy monitors--BindView Development Corp.'s bv-Control 7.2 and Policy Operation Center 4.2, Computer Associates International's eTrust Policy Compliance 7.4, Configuresoft's Enterprise Configuration Manager 4.0 and Security Update Manager 2.0, NetIQ's VigilEnt Security Manager 4.0, Pedestal Software's SecurityExpressions 3.0, PoliVec's Security Automation Suite (Builder 2.6, Scanner 3.5 and Enforcer 1.1), and Symantec's Enterprise Security Manager 5.5--in our Syracuse University Real-World Labs®. Xacta Corp. declined, saying its product was between versions, and Tivoli did not respond to our invitation.