HP ArcSight ESM E7600-2500 - product upgrade license - 1 license

ArcSight analyzes and correlates every event that occurs across the organization - every login, logoff, file access, database query, etc. - to deliver accurate prioritization of security risks and compliance violations. The powerful correlation engine of ArcSight sifts through millions of log records to find the critical incidents that matter. These incidents are then presented through real-time dashboards, notifications or reports to the security administrator.

With deep understanding of users and roles, network activities and flows, ArcSight is uniquely able to understand who is on the network, what data they are seeing, which actions they are taking with that data, and how that affects business risk. Unlike competing products, ArcSight can model not only IP addresses/network zones, systems and devices, but also users, employees, customers and partners for powerful analysis. ArcSight can then apply modern techniques including pattern recognition and behavioral analysis to detect the sophisticated threats that are hurting organizations every day. Once threats and risks are identified, ArcSight uses its built-in workflow engine to manage incidents and prevent damage.