|
Product Features
- Intrusion Detection System based on security Events analyzer
Nsauditor have incrusted intrusion detection system based on Security Event Log analyzing.
Personal firewall provides home users and small-business owners with the highest level of protection. It stops known and unknown Internet threats and blocks unwanted connections.
Alerts when IP Address Table or Routing Table are changed by using E-mail, Net Send, Speech Recognition method or by playing user selected voice file.
- Security Event Log Monitor
Security Event Log Monitor monitors the security event logs of Windows NT/2000/XP servers or workstations and notifies of the possible intrusions/attacks by using E-mail, Net Send, Speech Recognition method or by playing user selected voice file.
Network Monitor shows detailed listings of all TCP and UDP endpoints, including the owning process name and details, remote address and state of TCP connections, as well as the host dns name, country , network class, appropriate service name and service description.
NetBios Auditor is a tool to discover NetBios names. NetBios names are the names of the Services and Machines. NetBIOS Scanner is a powerful and fast tool for exploring networks , scanning a network within a given range of IP addresses and for listing computers which offer NetBIOS resource sharing service as well as their name tables and netbios connections.
This tool allows to perform an audit on a machine running MS SQL server.
SNMP auditor is a tool that allows to walk through all SNMP MIBs of your nodes and to audit SNMP community names using values stored in xml database.
- Packet Filter ( the protocols count will be enhanced in the next releases )
Packet Filter provides a real-time network packet filtering and analyzing. It filters the packet by all IP, ICMP, TCP, UDP, NETBIOS-SSN packet header fields.
- Packet Editor (the protocols count will be enhanced in the next releases )
Packet Editor is a tool to decode IP, ICMP, TCP, UDP, NETBIOS-SSN packets.
Audit Sun RPC uses ONCRPC (Sun RPC) protocols to access the Portmapper daemon/service that typically runs on port 111 of UNIX or Linux machines.This tool includes a portmapper to dump where a list of all running registered daemons are shown.
Audit MSRPC, is a Microsoft implementation of DCE RPC. The auditor dump is a list of named pipes that are used by Windows RPC services as endpoints. The interface identifier associated with each named pipe represents the service typically accessed when a given named pipe is used.
Port Scanner is a TCP/UDP scanner, a tool that detects if certain TCP/UDP ports are open and accepts connections. TCP scanners are usually used to check if the remote computer runs services (e.g. Telnet or FTP). The main function of the port scanner consists in sending messages to the user-defined port list .The type of received response indicates whether the ports are opened. Port Scanner has the following scan modes: connect scan, SYN stealth, FIN stealth, Ping sweep, UDP scan, NULL scan, XMAS tree, IP protocol scan, ACK scan.
- Trojan horses or backdoor software Detector
Port scanner will list all open ports. If the port is a well-known Trojan port, it will be displayed in RED.
CGI probes are sent against web servers. This tool provides an ability to turn them off and if the user is running an audit from a proxy server, he/she can configure the scanner to run CGI probes through that proxy.
- Remote System OS detector
Remote OS detector uses well known TCP, UDP, ICMP packet probes and available OS fingerprints.
Adware Scanner searches the registry and gives you a quick look at the Adware, malware and spyware installed on your computer or in the range of network computers. Using colored icons( green icon - safe, yellow icon - unknown) Adware Scanner shows harmful Objects.
Network Auditor is a tool to discover network services and to check them for discovering well known vulnerabilities. This tool creates an audit report.
Ping is a tool that provides an opportunity to verify that the specified IP address exists. This tool is used to ensure that a host you are trying to reach is accessible. Ping also can be used with the reachable host to see how long it takes to get the response back. Also you can get information about the operating system of remote host.
TraceRoute is a tool that traces the route (the specific gateway computers at each hop) from a client machine to the remote host by reporting all router IP addresses between them. It also calculates and displays the duration that each hop takes. Trace Route is a handy tool for both understanding where problems exist in the Internet network and for getting a detailed sense of the Internet itself.
| 
