The firms will announce today that Qualys has built an Event Collector that can work with the QualysGuard appliance to feed vulnerability data into SSMS, Symantec’s security event correlation system.
It’s the seventh third-party event collector built for SSMS, but the first that feeds state-oriented vulnerability data, rather than event data. Previous event collectors have been written for intrusion detection systems and firewalls.
Symantec director of business development Stephane de Saint Albin said that in the first phase of the integration, QualysGuard data will be presented in the same console as event data, and administrators will have to do the correlation in their own heads.
In future, however, the companies hope to provide deeper integration, so that event data can be compared against vulnerability data, so administrators can see more easily whether they are actually vulnerable to attacks they experience.
