ANORBANK announces a tender for a SIEM (Security Information and Event Management) solution.

ANORBANK announces a tender for a SIEM (Security Information and Event Management) solution.

The system must meet the following requirements:

1. The SIEM must support processing 6,000 events per second (EPS – events per second).

2. The SIEM must support scalability of EPS capacity.

3. The SIEM must support on-premise deployment within the Customer’s infrastructure.

4. The SIEM must support parsing of raw events from major operating systems such as Windows, Linux, FortiOS, and Oracle.

5. The SIEM must support the creation of custom parsers for non-standard event sources.

6. The SIEM must support modifying parsers via a graphical user interface (GUI) and deploying them to a running system.

7. The SIEM must include a set of correlation rules for various operating systems such as Windows, Linux, FortiOS, and Oracle.

8. The SIEM must support incident management capabilities.

9. The SIEM must support hierarchical log storage (Hot-Warm-Cold) to optimize search performance.

10. The SIEM must support data storage on external storage systems (e.g., NFS server).

11. The SIEM must support role-based access control (RBAC) to restrict access to the GUI and data at different levels.

12. The SIEM must support authentication protocols (LDAP, SAML via Okta, Duo, Radius).

13. The SIEM must support customization of report export templates.

14. The SIEM must support scheduled report generation.

15. The SIEM must include a set of reports compliant with international standards such as PCI, CIS, and ISO 27001.

16. The SIEM must support categorization of assets/event sources.

17. The SIEM must support collection of streaming telemetry such as NetFlow and sFlow.

18. The SIEM must support monitoring and alerting on anomalies identified through telemetry analysis.

19. The SIEM must support deployment of agents on event sources for enhanced logging of Windows and Linux servers.

20. SIEM agents/collectors must support File Integrity Monitoring (FIM).

21. SIEM agents/collectors must support User and Entity Behavior Analytics (UEBA).

22. SIEM agents/collectors must support event buffering in case of loss of connectivity with the central management system.

Email:

TenderAnorbank@anorbank.uz
ANORBANK@exat.uz

Read more