Advanced Security Administrator and Gist Software for Windows

GFI EventsManager
$800 - GFI Software

GFI EventsManager is a solution for centralized event log management and reporting, that boasts the most advanced event processing and filtering rules in the industry. The solution delivers insight into all that is happening on the IT infrastructure and ensures maximum network uptime; acting as an early-warning system for all potential hardware and software failures, whilst monitoring and alerting on possible security breaches. GFI EventsManager has also been developed to satisfy the increasing demands of event-log based legal compliance.

GFI EventsManager collects data from all devices that use Windows event logs, W3C, and Syslog, and uses highly advanced event processing and filtering technologies to identify key data. With continuous 24 hour activity monitoring and alerting, GFI EventsManager empowers the administrator to prevent network disasters through notification of illicit activity or possible hardware and software failures on their network, supplying info such as; which software is being installed/uninstalled, health status of Microsoft Exchange and other servers, which users are accessing sensitive files, login related activity and more. GFI EventsManager provides real-time alerting when critical events arise and suggests remedial action.

GFI EventsManager turns data into knowledge through the large selection of predefined and easily customizable reports. This is an affordable solution that will allow any company to meet several objectives including:
? Information system and network security
? System health monitoring
? Legal and regulatory compliance
? Forensic investigations

---

---

Mirador Instant Messenger
$333.5 - Serial Scientific International, Inc.

Mirador instant Messenger (MIM) is a secure, reliable and feature-rich presence based messaging solution built for the enterprise. It offers advanced functionality, security and stability that businesses require and helps to ensure compliance with various regulatory agencies such as HIPPA and the SEC.
At the core of MIM is a powerful client-server architecture designed with the latest technology. Mirador Instant Messenger offers many options including encryption, meeting, remote control, file transfer, voice over ip and is managed through a very complete administration console. The Administration application permits to enable or disable various features of the IM Client, setup company policies, manage additional modules, perform queries on the database, monitor the activity on the server and retrieve statistics for the IM network.
Unique to Mirador Instant Messenger is the inclusion of advanced functionality such as Remote Control and a powerful update mechanism requiring minimum intervention from an IT staff. When enabled, the automatic update mechanism ensures that the software is always running the latest code.
Remote Control provides complete keyboard and mouse control of a remote computer. The function can be easily disabled by an administrator to comply with internal security policies or enabled for specific groups or users. When enabled the setup of a Remote Control session is simple and fast but requires an authorization before any access can be granted to a remote computer.
Mirador Business Instant Messenger uses a secure communication protocol with SSL encryption and includes a server that manages, tracks and archives instant-messaging threads. A user can retrace the history of all communications that he exchanged in the past with other colleagues and make sure that no points have been omitted. An administrator can monitor all messages and activity occurring on the private instant messenger network and manage and control all user accounts.

---

---

Windows Password
$39 - LastBit Software

WinPassword (formerly known as NT Password) is an application for NT/2000/XP/2003 system administrators for finding breaches in system security. WinPassword tries to retrieve plain-text passwords analyzing user password hashes. If it is possible to recover a password within reasonable time, the password should be considered insecure. WinPassword can also be used to break lost or forgotten passwords of particular users. Please note that this program is for advanced users and system administrators with good understanding of the Windows security model. WinPassword uses both traditional recovery methods (Brute Force Attack, Dictionary Search) and the new Smart Table Recovery (TM) technique. Smart Table Recovery (TM) technique is based on special precomputed recovery tables (rainbow tables) and it's especially useful for retrieving complex 7 character passwords containing punctuation marks and other non-alphanumeric characters.

---

Registrar Registry Manager
$44.95 - Resplendence Software Projects

Registrar Registry Manager is a complete registry management solution with a wealth of powerful features. It is intended as a complete and safe solution for administrators and power users for maintaining the registry on both the desktop as well as remote computers on the network.

It offers the benefit of a one-stop registry management solution, a very rich set of tools which replaces a large range of separate utilities. It is safer than Regedit, the native Windows registry editor as this software offers registry backup and restore features as well as multilevel undo.

The built-in registry file editor allows you to edit registry files on disk such as those which make up the systems registry image so you can use it to recover and repair broken Windows installations which may be even unbootable due to registry errors. This feature has been a life saver to many system administrators.

Other features include fast registry background search with replace, delete and export options, detailed registry monitor which monitors registry operations by the system and other applications, a bookmark editor with descriptions, categories and key coloring, an advanced
registry compare tool, a CLSID lookup utility and detailed property pages.

Registrar also offers a registry defragmenter and several tools to clean out the registry so you can keep your computer running smoothly. If used with common sense, the registry file reference editor can be a great tool for cleaning your registry from unwanted entries.

Security editors allow you to set registry key access permissions, auditing and ownership. It offers multi-level undo so all registry changes can be individually undone.

The program comes in an attractive explorer-style interface which is highly customizable.

---

ThreatSentry
$399 - Privacyware

ThreatSentry is a Host Intrusion Prevention software application designed to protect Windows Web servers running Microsoft Internet Information Services (IIS). ThreatSentry delivers multi-layered protection via two core components. The first, an Application Firewall, is pre-configured with a knowledgebase of known exploitive techniques and attack characteristics. Administrator can establish explicit guidelines for permissible and/or denied activity. The application firewall is coupled with an advanced neural-based Behavioral Engine that organizes server requests into a multi-dimensional baseline of typical system activity. Each server connection is scrutinized by the rule-set configured in the application firewall and the behavioral baseline to identify and take action against any activity falling outside trusted parameters. ThreatSentrys intrusion prevention capabilities progressively improve as the baseline evolves automatically or based on input from the system administrator.

ThreatSentry Key Features:

Multi-layered protection - IIS Host Intrusion Prevention Software + Application Firewall

Unsurpassed Protection from Known/New, Internal/External Threats
ThreatSentry protects IIS servers from an array of vulnerabilities including Directory Traversal, Parameter Manipulation, Buffer Overflow, Parser Evasion, High-bit Shellcode, Printer Protocol, Remote Data Services, and others.

Unparalleled Affordability and Ease-of-Use
ThreatSentry is exceptionally easy to use and affordably priced for enterprises of any size.

Logging, Reporting and Audit Features
Review, sort, manage or export Security Alerts and Training Events. Track and audit reclassified events.

Centralized Network Management
ThreatSentry features a central console for multi-server management.

Security Alert Notification
ThreatSentry Security Alerts can be transmitted via email, pager and/or cellular phone.

Fully integrated Firewall Blocks all network ports for IPs listed in the Blocked List.

---

SMTP Preprocessor
$0 - Sergey Merzlikin

SMTP Preprocessor is advanced tool for mail administrators. It enhances functionality of corporate mail server. The program receives SMTP messages before corporate SMTP server, on-the-fly changes or rejects them, and retransmits result to the server. Wide range of settings allows to improve security and add new features to corporate SMTP server. SMTP Preprocessor can reject connection based on remote host IP address or DNS name (Black List), presence of reverse DNS PTR record, validity of HELO or EHLO command and connections limit; reject MAIL command based on sender address (Black List), transactions limit and message size; reject RCPT command based on recipient address (Private Recipients List), recipient domain name (Anti-Relaying), sender address (Restricted Senders List), recipients limit or based on Greylisting technology; reject out-of-order SMTP command; flexibly replace corporate SMTP server response or any SMTP Preprocessor generated response; replace sender in SMTP envelope (MAIL command); replace recipient in SMTP envelope (RCPT command). The program keeps adjustable detailed log of all SMTP events.

---