SIQL and Elasticsearch
The proliferation of a myriad of network devices creates complexity that hinders the ability to gather, process, access, and analyze network security data.
FireMon’s simple, intuitive visual workflows empower you to easily identify where and how to make needed changes
Only FireMon’s exclusive query tool can scan tens of millions of IPs non-disruptively in an hour—unlike competitive solutions that require days or weeks.
FireMon’s proprietary Security Intelligence Query Language (SIQL) provides a robust solution for accessing and analyzing your data, enabling customizable, granular searches where competitors support only rudimentary searches.
In combination, Elasticsearch and SIQL increase your security team’s data-gathering efficiency, reduce data access complexity and provide operational insights that allow you to deliver innovation while enhancing your risk and compliance posture.
Network Security Policy Management
Without FireMon SIQL and Elasticsearch
- Manually gathering and normalizing data from disparate devices reduces efficiency
With FireMon SIQL and Elasticsearch
- Maximize efficiency in device data ingestion, normalization and storage while creating indexes structured to support large-scale environments
- Gathering insight from enterprise rulebases with rudimentary search tools is a complex process that yields suboptimal results
- Reduce data access complexity by performing granular, customized searches, including searches with intuitive graphical filters
- Assessing compliance through manual processes yields poor results and inhibits timely audit responses
- Facilitate compliance by easily conducting compliance assessments on any object in the network