But just look at the upsell opportunities. Now they're going to have to sell 
you something to manage that storage.

Thanks,
Brian Desmond
[email protected]

c   - 312.731.3132

From: Sean Martin [mailto:[email protected]]
Sent: Monday, November 01, 2010 6:27 PM
To: NT System Admin Issues
Subject: Re: Question on Granting service account read access to Domain 
Controller Eventlogs

Ugh, our Information Security team is implementing SSIM right now. I'm not 
directly involved, other than having to provide upwards of 10TB for expected 
storage requirements. I just shudder at anything branded Symantec anymore....

- Sean
On Mon, Nov 1, 2010 at 3:02 PM, Free, Bob <[email protected]<mailto:[email protected]>> 
wrote:
LOL. Leave it to Symantec to be different. I heard a rumor I may be getting 
first-hand experience with it so I may want to pick your brain :)

Rgds

--bob

From: Ken Schaefer [mailto:[email protected]<mailto:[email protected]>]
Sent: Sunday, October 31, 2010 12:36 AM

To: NT System Admin Issues
Subject: RE: Question on Granting service account read access to Domain 
Controller Eventlogs

Hi,

We're implementing SSIM (the Symantec product) and it pulls logs. Apparently it 
scales...

Cheers
Ken

From: Free, Bob [mailto:[email protected]<mailto:[email protected]>]
Sent: Friday, 29 October 2010 11:09 PM
To: NT System Admin Issues
Subject: RE: Question on Granting service account read access to Domain 
Controller Eventlogs

I have learned here over the years not to be overly presumptive hence the 
caveat about not understanding the requirements which were a little vague to 
me, particularly the fact that I didn't see an agent mentioned :)

That's also the opposite of the SIEM solutions and MSSPs I've ever worked with 
as well, IME the endpoints push to the collector/aggregator and as I said, I 
don't envision how an aggregator pulling logs scales worth a darn so I asked 
the question.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to