Snare Central 8.4

The Global Standard in Centralized Log Management

The latest version of Snare Central will help security teams worldwide meet evolving log management and collection requirements, enhance network security, and combat cyber attacks with richer data and reporting capabilities. Designed to help meet the demands of both public and private sector organizations across the globe, Snare Central 8.4 includes several updates that will:

Help to save on downtime and system rebuilds
Makes it easier to collect logs from more systems
Help with regulatory requirements such as GDPR, ISO27001, PCI DSS
Provide enriched data to third party SIEM systems
Make threat hunting easier for richer data formats

Contact Your Local Snare Office Try Snare for Free

High Availability

Minimize the Chance of Losing Log Data

High Availability helps to ensure there is minimal chance of lost log data, which is critical for forensic analysis in the event of a cyber attack or breach. High Availability also helps meet regulatory compliance requirements such as GDPR, ISO27001, and PCI DSS.

With High Availability, security teams can:

Reduce the risk of losing log data, in particular UDP-based systems where data can be lost more easily
Have more resiliency in log collection
Reduce the need for caching when systems can failover
Make it easier to reflect to two or more “master” collection Centrals or SIEM systems
Separate hardware provides better redundancy
Distribute the load over multiple clusters

Try Snare for Free Contact Us

Try Snare for Free Contact Us

Backup & Restore

Backup & Restore Log Data for Forensic Analysis

Snare Central’s simple Backup & Restore feature helps to save on downtime and system rebuilds. With Snare’s Backup & Restore capabilities and the ability to workflow the process with scheduled backups, security teams can quickly, easily, and automatically recover log data for forensic analysis or use disk manager to view log data from backup locations.

Simply put, Snare Central makes sure your company’s valuable log data is there when you need it:

Easily restore and select components
If a user makes a mistake or breaks their Snare Central configuration, they can recover the components from backup
Small workflow of steps required
Flexible backup options and granular recovery of Snare Central components or system logs
Flexible options for backup destinations – NAS, USB, ISO, DVD for long term storage or immutable media

Snare Reflector

Collect More Logs from More Systems

Snare Central’s Reflector makes it easier for security teams to collect logs from more systems. The Snare Reflector provides enriched data to third party SIEM systems, improving performance and scalability.

With the new Snare Reflector, security teams can enhance their log collection and log management capabilities with:

New log formats such as JSON
Improved disk caching that requires less admin to manage
Enhanced ability to collect logs at higher eps rates on the same hardware
Additional log formats for compatibility with other third party SIEM systems

Try Snare for Free Contact Us

New Log Formats

Make Threat Hunting Easier

Snare Central’s expanded library of log formats makes threat hunting easier for richer data formats. The granular log details and drill-down capability also make it easier for data analysis.

With Snare’s expanded log formats, threat hunting becomes much easier:

JSON formats provide more detail, making it easier to parse for third party SIEM systems
Enriched log data uses newer Snarev2 and JSON formats
Simpler data analysis with more granular log data formats
Send to multiple elastic destinations at the same time

Try Snare for Free Contact Us

New Reports

Enhance Reporting and Parsing

Snare Central includes over 200 additional reports covering new log types from additional vendors. Snare Central’s robust reporting capabilities increase log parsing and reporting options for industry vendor logging systems, providing greater industry coverage and a level of reporting detail required for complete data analysis and compliance.

26 Sysmon – to help with XDR, DNS and malicious tracking
33 Fortigate – covering the many log types for smart appliances
54 Cisco Firepower Threat Defence – Intrusion Prevention Device
88 Snare v2 log – covers the new MacOS, Windows Snarev2 log formats
Snare v2 reporting provides more granular details for data analysis

Read our latest white paper for more use cases for Snare XDR and Sysmon >>

Read Our XDR + Sysmon White Paper

Snare Central Capabilities

High Availability
High Availability helps to ensure there is minimal chance of lost log data, which is critical for forensic analysis in the event of a cyber attack or breach. High Availability also helps meet compliance regulatory requirements such as GDPR, ISO27001, and PCI DSS.

Backup & Restore
Helps to save on downtime and system rebuilds with simple Backup & Restore. Recover log data for forensic analysis or use the disk manager to view log data from backup locations.

550+ Reports | XDR & Sysmon
Over 200 additional reports cover new log types and threat hunting enhancements using Sysmon and additional log sources.

New Log Formats
Enriched log data using newer Snarev2 and JSON formats allows for simpler data analysis with more granular log data formats. This includes Sysmon, Fortigate, Cisco, MacOs, Windows, and Snare v2 log formats.

Color Coding by Criticality
Report criticality is now visible on report icons. Users can set up reports based on criticality levels and what the they deem to be Low Priority (green) to High Priority (red). You can also filter your reports by criticality so you’re always focused on what’s most pressing.

Dedicated TLS Syslog Port
Snare Central 8.3 includes a new dedicated TLS listener port for syslog collection.

Out-of-the-Box Compliance Reports
New compliance reports include CISA DNS, FIM, Agent Heartbeats, MacOS, and vCenter – all found in the Reports section of Snare Central.

Receiving SNMP v3 Traps
We now support receiving SNMP v3 trap data and it’s available to be analyzed within Snare Central 8.3 under the SNMPLog event type.

Network Storage for Backups
Redundancy is critical in cybersecurity compliance and Snare Central 8.3 now supports Network Storage (CIFS or NFS) to back up your collected log data.

Enhanced File Integrity Check Administration
This tool allows the user to schedule, monitor, and administrate system files integrity checks and report on any changes on such files.

Snare Enterprise Agents
The industry’s best for Windows, Linux, Unix, macOS, Epilog, etc. – including FIM, RIM, FAM, RAM, and USB solutions.
Windows Agents Veracode Verified. No Java or .NET required

Veracode Verified

24x7x365 Support
We have customers all over the globe and on every continent, so we are here to support you whenever you need it.

“We saved almost double of what we pay for the full Snare enterprise solution from the reduced ingestion for our SIEM in the first year! We like having the ability to have more control over our growing SIEM costs.”

Large American Energy Company

“Snare’s flexibility to send logs to multiple destinations, over multiple header format and protocols has allowed us to get all the data needed to send to our (analytics tools). Helping to meet SOX, PCI compliance and more to analyze clean data.”

Nationally Recognized Insurance Organization

I tend to use Snare when customers have a lot of end points, 1,000 or more though particularly over 10K windows end points and they know they want to monitor each and every one of them. I know Snare will report in every time, all the time, even in large scale environments.

IBM

Ready for Snare Central 8.4?

Get in touch with your regional Snare office

The Global Standard in Centralized Log Management

Minimize the Chance of Losing Log Data

Backup & Restore Log Data for Forensic Analysis

Collect More Logs from More Systems

Make Threat Hunting Easier

Enhance Reporting and Parsing

Snare Central Capabilities

Ready for Snare Central 8.4?

CALL US AT:

Americas

APAC

EMEA

Adelaide (Corporate HQ)

Products

Recent Posts