Stonegate Management Center

StoneGate Management Center forms the core of the StoneGate Platform, providing unified management for StoneGate Firewall, VPN and IPS solutions.

• Manage the security solution holistically
• Utilise shared network elements
• Benefit from shared logging, reporting, auditing, and other tools

Enquire about this product

---

Audit

Audit logs contain information on the actions performed on the system and on system-generated events.

By examining the audit logs it is possible to trace, for example, what kinds of administrator actions have been performed and by whom. This data may prove to be important when trying to figure out possible configuration errors and in other comparable events.

The audited events include:

• Actions concerning elements configuration (creating, editing, deleting, importing or exporting)
• Actions performed on the firewall and IPS nodes (policy upload, control commands, etc.)
• Use of command line tools (e.g., backing up and restoring)
• Actions related to certificates
• Actions related to administrator login authentication

Benefits

• Provides detailed accounting data, for example to external auditors
• Makes possible to review events and determine what was happening before, during and after some incident
• Provides a way to detect unusual and unauthorised events
• Helps to meet regulatory compliance

---

Diagrams

Network Planning and Documentation Tool

Administrators often require up-to-date documentation of their network configuration. However, any diagrams created with a third-party diagramming tool must be constantly updated by hand and are almost always out of date. Once the diagram is done, the system still needs to be configured, thus duplicating the work.

The Diagram Editor is an integrated tool for diagramming your network configuration. At the same time you diagram the network, you can create the network elements needed for the security engine configuration. The same network elements are found throughout the Management Center.

Benefits

• Save time and reduce errors by configuring the system while diagraming network
• Information about the diagram elements are always consistent as changes are immediately available everywhere
• Constant, always up-to-date network documentation
• Documents existing configuration by automatically creating a new diagram from selected network elements
• Automated diagram generation
• Use diagrams for status monitoring
• Use maps or floor plans as background pictures

---

 Log Browsing

StoneGate provides detailed and easy-to-manage views to security events. From the log entry you can, for example, open directly to the corresponding rule from the security policy. The log browser also contains statistical figures of filtered log entries. Using this view you can easily see the traffic peaks of your security system.

Benefits

• User-friendly and fast log browsing
• Graphical statistics of filtered logs
• Direct link to rulebase
• Powerful  filtering
• Easy export to PDF, CSV, or XML

---

Monitoring

StoneGate provides a state-of-the art unified real-time monitoring view for System Component Monitoring as well as Network Traffic Monitoring.

Benefits

• Get a visual overview of key statistics and spot trends from live reporting
• Reduce the administrative work by reacting faster and in advance
• Help spotting and locating problems in the security system

System Monitoring

• State Overview
• Status monitoring and surveillance
• System statistics
• Detailed info view

Traffic Monitoring

• Traffic statistics
• Opened connections monitoring
• Blacklisted traffic monitoring
• VPN tunnel monitoring

---

Routing

Routing is configured using the graphical user interface of StoneGate Management Center.

The administrator can use the same network elements that are used elsewhere in the configuration. Routing for a clustered gateway is done once, not separately for every member of the cluster. There is no need to use command line tools in the gateways.

Routing configuration generates and updates the anti-spoofing rules automatically. In most cases there is no need to touch the anti-spoofing, but naturally you can edit the generated rules if needed.

Benefits

• Simplifies the configuration and recovery process, saving time and money
• Reduces the risk of human errors
• Anti-spoofing is done automatically
• Easy drag-and-drop configuration
• Routing information stored in management
• Source and static multicast routing support

---

Security Policies

The administrators of StoneGate Security Platform can implement the corporate security policy through three security policies:

• Firewall Security Policy
• IPS Sensor Policy

Benefits

• Easier to maintain because of reduced complexity
• Increase security by having better control and faster changes
• Lower cost of maintenance and administration
• Intuitive rule-based configuration
• Revolutionary structural approach
• Fits well in distributed administration
• Rule Search tool
• IP resolve tool
• Export to XML, PDF and HTML

Alternative Stonegate Products

Stonegate Firewall / VPN

StoneGate IPS - IDS

Stonegate SSL VPN

StoneGate VMware Certified Appliances

Alert Escalation

Efficient alert management is crucial for timely administrator intervention in events that require immediate action.

• Policy based flexible configuration
• Several notification channels

Efficient alert management is crucial for timely administrator intervention in events that require immediate action. Administrators must ensure that the appropriate person handles all incidents and that issues are escalated if the primary person is not able to respond.

Emergencies often need to be handled differently during work hours than at night, or during weekends or holidays, and different issues often need different priorities.

StoneGate Management Center provides a tool for sending notifications and handling acknowledgements of both firewall and IPS alerts.

With StoneGate, you can define your alert handling policy based on the time of day, the alert type, severity and the originator of the alert. StoneGate also allows you to define alert chains for sending several notifications, or for escalating alerts if they are not handled properly.

Notification methods include email, SMS, SNMP Trap, and custom scripts. It is even possible to define notification thresholds in order to avoid flooding administrators with alert notifications. 

---

Incident Management

When suspicious activity is detected in the system, it is important to investigate the situation as quickly as possible.

StoneGate Management Center aids in incident case management by enabling the collection of all information about an incident.

Using the Incident Cases - element allows the administrator to gather all the data, actions, system configuration information and files related to a specific incident. It is also possible to print and export the incident information.

Benefits

• Accelerates incident handling and reduces incident costs
• Provides good reports about incident handling and its progress
• Creates organisational memory about past incidents
• Helps to train new administrators to the incident management process  

---

Reporting

Today's organizations need to be able to provide reports of their service and security both internally and to public authorities.

Service providers need to provide customized reports to their customers.

Reports are required for system troubleshooting and security policy enforcement. Administrators must be able to locate specific information from a large amount of log data.

The information hidden in this data can provide:

• Trend information to help with network planning
• Baseline information that can be used to identify unusual conditions and possible attacks
• Historical information that can help in analysis when investigating and cleaning up after an attack

Benefits

• Get a security overview on what has happened in a network over a given time period
• Spend less time extracting and presenting information, and more time acting on it

---

Remote Upgrade

Upgrading essential parts of your network infrastructure can be difficult and time-consuming. StoneGate's Remote Upgrade eases the burden.

Benefits

• Safely update your global system, at the most suitable time, in one simple step
• No on-site visits to the firewall engines needed
• Save time and money
• Automatic upgrade package download
• Fail-safe and fast
• Scheduled upgrades
• Centralised management