Cryptic Software CyberSight 5.7

CyberSight 5.7 is a threat detection and prevention tool that actively scans systems on a network. Simplicity is the key behind the software, which runs transparently to the user. With the capability of handling over 260 categories of threats, CyberSight is one of the most feature-packed security packages available.

The core of CyberSight is its ability to determine if rogue or dangerous tasks are attempting to infiltrate a system. Most security-based software relies on pre-defined signatures of virus and malicious code, which can't deal with new and unknown variations. CyberSight, as well as using signatures for detection, looks for changes in system software. As most viruses and malicious code are variations on existing threats, most security software needs to be constantly updated to detect the new variations.

Two components make up CyberSight - the server and client agents. The CyberSight server can be installed on any system with a sharable directory. The server component holds all the threat detection and scanning data. On the client, an agent is installed that actively scans the local system and can alert the CyberSight server if undesirable activity is detected.

Keeping track of threats and how they're handled is done via policies. Setting these up determines how CyberSight reacts to a potential threat.

To create a policy, you must invoke the Policy Manager and enter information about threats. CyberSight already includes a list of over 900 potential threats, but you can add your own. Threats are also classified by their severity level. CyberSight can even download signatures from the Cryptic World Wide Threat Archive, which has a repository of thousands of threat signatures.

If you find an infected file on the client system, simply drag and drop it onto the CyberSight icon on the desktop. CyberSight will then analyse the code and allow you to enter any relevant data about the file. The client agent then synchronises with CyberSight to update its threat listing.

Tracking of threats can be done in many forms. CyberSight actively scans all system traffic and can analyse port use, process activity, URL information and many others. For checking on clients, CyberSight can detect the instances on games being run, as well as FTP and ICQ sessions.

CyberSight's interface is its only real letdown, as setting up threat information might be a little overwhelming for inexperienced administrators. However, an investment in time does make using the program easier.

CyberSight 5.7 is a complete security solution for scaleable networks. It might be overwhelming at first, but you'll soon realise its true potential.

For single users, CyberSight Guardian (£49.99 ex VAT) is a scaled-down version based on the same technology.

Price

As reviewed (ex VAT) £6,499 (50-user licence)

Contact

Cryptic Software: 22 The Business Exchange, Rockingham Road, Kettering, Northampton NN16 8JX
Tel 01536 526455, Fax 01536 526458
www.cryptic.co.uk

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!