M3 Service
Thomason Technologies, LLC is now offering the M3 Service package to Manage, Maintain and Maximize your Sourcefire implementation.
You made an investment in the market-leading Sourcefire Intrusion Prevention Systems. You sent your security analysts to training and your implementation is up and running. For a time, everything is running smoothly. Now you realize your IPS sensors require updates, tuning and regular care and feeding. After three weeks or a month, your analysts are rusty. They don't have the latest information. They aren't sure which rules to turn on, turn off, block or ignore.
In addition, new configuration items are being released all the time. How do you set your pre-processor settings? How do I get reports designed exactly the way I want to see them? How do I get specific alerts sent to the CISO while others are only sent to the analyst?
Keeping up to speed on all these issues is a full time job and your security analysts are already responsible for the firewalls, VPNs, antivirus, web monitoring, application firewalls and other technologies.
The M3 Service gives you all the benefits of having a full-time person to manage your Sourcefire implementation without all the cost. We will Manage, Maintain and Maximize your implementation and take all that load off of your personnel, giving them more time to work with other security technologies.
Manage: We will manage users, all configuration items, reports and alerting features. If you need a user added, just ask. If you need a new report created, just ask. If you need alerts sent to a specific email address, just ask. We will give you a template of items that you can request and we will take care of it.
Maintain: We will make sure your systems are running the latest and greatest software and rule sets. No longer will you have to worry if your system got the latest updates. Software upgrades will be handled for you. If you already have automatic updates implemented, great. We will will validate those updates for auditing purposes. Automatic rule updates are great too, but what if they fail? What if there is a problem and they aren't uploaded properly. We will verify that the rule updates are loaded and will provide you with updated information should there be a problem with an update. In addition, should we (or you) discover a bug in the Sourcefire system, we will track that bug until it is fixed or a work-around is provided.
Maximize: Probably most importantly, we will regularly check the tuning of your systems. Every sensor will be tuned and the policy updated. Because we do this day in and day out, we know which rules are safe to disable and which need be set to block malicious traffic. We know what causes false positives and under what conditions. We will learn more about your network and tailor your policy for your organization based on our experience with dozens of companies, like yours.
Save Money
Save Time
Validate Implementation on Regular Intervals
Ensure Optimized Operations