Specifications

Guide to Snare for Linux

5 Snare Server

The Snare Server is a log collection, analysis, reporting, forensics, and storage appliance that helps

your meet departmental, organisational, industry, and national security requirements and

regulations. It integrates closely with the industry standard Snare agents, to provide a cohesive,

end-to-end solution for your log-related security requirements.

The Snare Server, as shown in Figure 8 collects events and logs from a variety of operating systems,

applications and appliances including, but not limited to: Windows (NT through 2012), Solaris, AIX,

OSX, Irix, Linux, Tru64, ACF2, RACF, CISCO Routers, CISCO PIX Firewall, CyberGuard Firewall,

Checkpoint Firewall1, Gauntlet Firewall, Netgear Firewall, IPTables Firewall, Microsoft ISA Server,

Microsoft IIS Server, Lotus Notes, Microsoft Proxy Server, Apache, Squid, Snort Network Intrusion

Detection Sensors, IBM SOCKS Server, and Generic Syslog Data of any variety.

Figure 8 Welcome to the Snare Server