incident management and external help desk system, two factor authentication

[RSAAdmin]

Hi all,

Here are a couple of questions that I have,

it is possible to link the security incidents that are created by enVision to an external Help Desk System (such as CA UniCenter) so that a helpdesk tickets can be generated based on a security incident?

In addition to that, can I integrate enVision login mechanism with RSA SecurID?

thank you.

Muljawan

[RSAAdmin]

Yes, first depending on what your ticketing system can accept, you can do standard output actions, e.g. an email, trap, syslog, etc. and control what is sent via the output action templates.  In addition, via Task Triage output action integration with Event Explorer through some scripting you can escalate an open task to a ticketing system.  You can search the on-line help for "task escalation process".  You might want to get some RSA Professional Services to help integrate.

I believe 2-Factor authentication will be supported in enVision 4.0.

[RSAAdmin]

As suskop explained, the Task Triage service in enVision can directly interface with an external trouble ticketing system. Through this interface, the details of the incident including the event trace, analyst annotations and other attachments can be posted to a trouble ticketing system (typically through a web form interface). This capability is present in V3.5/V3.7 and in the upcoming V4.0 enVision release, this functionality is enhanced with the ability for two-way synchronization so that state updated in the trouble ticketing system can be reflected back in enVision.

The 2-Factor authentication will not be present in the V4.0 release. It is currently targeted for the next enVision releast that will come after V4.0.

[RSAAdmin]

Thank you for all the replies.

do you have a road map document that shows the upcoming feature enhancement (such as two factor authentication ...etc)?

When will version 4.0 be released?

[RSAAdmin]

An updated roadmap presentation is being prepared and a notification will be generated when it is available.

You can plan for RSA enVision 4.0 being available to be used in production deployments in Q1 2009. It is recommended that you engage your technical enVision representatives to learn more about the release and to prepare for its introduction so that you can leverae the new features and capabilities.