Information Security Blog

Novell Sentinel 6.1 — SIEM Grows Up

Having cut my teeth on SIEM in early 2001 (when it was still called SEM) the latest incarnation of Novell’s Sentinel product looks as different from those products as the iPhone 3G looks from the Motorola Startac that I thought was so nifty.

The acquisition of promising SIEM technologies by vendors like Novell with the development and support resources to turn them into enterprise solutions has been great for the industry as a whole and for Sentinel in particular.

Highlights for Novell Sentinel 6.1 include:

A new single server version optimized for Rapid Deployment to reduce the time and cost to get up and operational.
An option to run on a full open source stack to reduce costs, improve reliability, and increase resource availability. The new version leverages Linux/Apache/Jasper/Postgres/ AJAX. Custom collectors are also now in JavaScript.
A new stand-alone log collector with very high EPS rates and compressed storage for simpler implementations where full SIEM capabilities are not required.

I was also lucky enough to get a look at Novell’s product roadmap. It looks like Novell has a few more rabbits up their sleeve that are just around the corner.

Gartner predicted “healthy revenue growth” for SIEM in the next year — I guess they had a sneak peek at the Sentinel roadmap.