1. www.lumension.com © Copyright 2008 - Lumension Security Lumension Security PatchLink Enterprise Reporting™ 6.4 Overview and What’s New

2. © Copyright 2008 - Lumension Security www.lumension.com 1 Agenda Market Trends Overview Key Features Sample Reports Report Library How It Works Professional Services PatchLink Enterprise Reporting Advantage

3. © Copyright 2008 - Lumension Security www.lumension.com 2 Market Trends in IT Reporting Increased focus on corporate governance Greater IT and Regulatory Compliance Requirements Enterprises need analytics to better understand and control the effectiveness of their vulnerability management processes to:  Assess business and security risk with accurate analysis and reporting  Measure an organization’s level of compliance  Provide visibility to management for risk management and security posture Two-thirds (66%) of enterprises are subject to regulations such as Sarbanes-Oxley, FISMA, HIPAA, and the European Privacy Directive. According to a recent Forrester report titled “The Myths of Information Security Reporting”, senior managers today must not only manage and measure the information security program but they must also translate those measurements into meaningful reports for senior executives.

4. © Copyright 2008 - Lumension Security www.lumension.com 3 PatchLink Enterprise Reporting 6.4 - Overview Measure and Ensure Network Security Demonstrate Compliance to Security Policies and Regulations Use or Extend Over Two-Dozen Sample Reports Easily Create and Share Custom Reports Open Reporting Schema Works With Existing Reporting Tools Consolidated Analysis and Reporting of all Enterprise Vulnerability Management Information

5. © Copyright 2008 - Lumension Security www.lumension.com 4 Enterprise Reporting 6.4 – Differentiators Open Reporting Schema: Data views make it easier to find reporting data; underlying queries are exposed to easily create custom reports; works seamlessly with third party reporting tools including SQL Reporting Services, Business Objects, Crystal Reports, and more. Centralized Reporting: View consolidated data from multiple PatchLink Update Servers, automatically transferred to a secure central repository, via RSA encryption. Comprehensive Report Library: Over two-dozen standard reports for vulnerabilities, patch deployment, inventory, compliance, and more are included or create custom reports for your unique security needs. Custom Policy-Based Reporting: Flexible network security reporting based on custom policies to ensure organizations are compliant with SARBOX, HIPPA, FISMA, and others. Automated Report Generation and Distribution: Schedule automated report generation and email distribution of reports to management to reduce the impact on network resources.

6. © Copyright 2008 - Lumension Security www.lumension.com 5 Enterprise Reporting 6.4 - Open Schema User Views make it faster and easier to identify critical data to build reports Underlying queries are exposed to easily create custom reports Works seamlessly with third party reporting platforms including MS SQL Server 2005, Business Objects, Crystal Reports, Microsoft Access and Excel as well as any ODBC/OLEDB compliant reporting tool PatchLink Enterprise Reporting Server – User Views

7. © Copyright 2008 - Lumension Security www.lumension.com 6 Enterprise Reporting 6.4 – Centralized Reporting Multiple or single PatchLink Update environments Centralized reporting on all data collected through the patch and vulnerability lifecycle

8. © Copyright 2008 - Lumension Security www.lumension.com 7 Enterprise Reporting 6.4 - Comprehensive Library Asset Management Hardware Assets by Update Server Hardware Assets Metrics Hardware Assets by Class Software Assets by Class Software Assets by Device Vulnerability Management Patch Assessment Patch Tuesday Assessment Vulnerability Release by Vendor Vulnerability Trending Critical Patch Status Vulnerability Status by Day Vulnerability Status Drill Compliance Custom Compliance by Day Custom Compliance Daily Custom Compliance Weekly Mandatory Baseline Compliance Summary Mandatory Baseline Compliance Detail Change Management Agent Status Platform Change Service Change Software Change Deployment Status Drill Hardware Change Hardware Change by Agent

9. © Copyright 2008 - Lumension Security www.lumension.com 8 Enterprise Reporting 6.4 - Custom Reporting Advanced reporting capabilities Based on your organizations custom policies Ensure you are compliant with SARBOX, HIPPA, FISMA, and others. Enterprise Reporting Server – Sample Custom Report

10. © Copyright 2008 - Lumension Security www.lumension.com 9 Enterprise Reporting 6.4 - Automated Generation Scheduled data transfer Scheduled report generation Role-based data and report access Automated email distribution of reports PatchLink Enterprise Reporting Server – Add Users by Role

11. © Copyright 2008 - Lumension Security www.lumension.com 10 Enterprise Reporting – Key Features Auto Report Generation & Distribution - Schedule automated report generation and immediate email distribution of reports to authorized users Comprehensive Report Library - Over 30 standard reports for vulnerabilities, patch deployment, inventory, compliance, and more are included Data Mining - Interactive reports allow you to “drill down” into report data, drilling from a global view of all users down to individual groups and entire Update servers down to individual devices. Efficient Data Consolidation - Installs on a separate server to minimize disruptions to PatchLink Update, enabling you to run reports without interrupting key patch and vulnerability tasks Enterprise Dashboard - Global view of vulnerability status for all enterprise assets provides a unified look at the health of your enterprise. Extensible to 3rd Party Reporting Tools - Works seamlessly with third party reporting tools including SQL Reporting Services, Business Objects, Crystal Reports, and more Group Hierarchy Reporting Structure - Ability to report on custom nested groups created within PatchLink Update and directory service groups designated in your Microsoft Active Directory Services structure Instantaneous Results - View current status of vulnerability management efforts with up-to-minute reports Open Reporting Schema - Data views make it easier to find reporting data; underlying queries are exposed to easily create custom reports Policy-Based Reporting - Flexible policy-based reporting enables you to substantiate compliance with security aspects of government regulations such as Sarbanes-Oxley, HIPPA, FISMA and others Secure, Automated Data Transfer - Data from multiple PatchLink Update Servers is automatically transferred to a secure central repository using RSA encryption

12. © Copyright 2008 - Lumension Security www.lumension.com 11 Enterprise Reporting 6.4 – New Features Compatible with PatchLink Update 6.4 Support for Update 6.4 Group Hierarchy Reporting Structure  Nested Groups  Directory Service Groups Backwards compatibility with Update 6.2 and 6.3

13. © Copyright 2008 - Lumension Security www.lumension.com 12 Pricing and Licensing Models Licensing  Server Software – Perpetual w/ Annual Maintenance  Managed Devices (Agents) – Annual Subscription Pricing  Server Software  $1,995 per Update Server  Managed Devices (Agents)  $3 per node (1 year subscription) »Minimum 10 Nodes Required »Quantity breaks at 250, 500, 1,000, and 2,000 nodes »Multi-Year Discounts for 2 and 3 year deals

14. © Copyright 2008 - Lumension Security www.lumension.com 13 Professional Services Offerings Implementation Services  Conduct a needs assessment and design a solution  Execute and automate your reporting requirements Custom Reports  Create security, policy, or asset management reports unique to your organization Advanced Custom Reports  Design Executive Dashboards and Scorecards

15. © Copyright 2008 - Lumension Security www.lumension.com 14 Thank You For more information, please call United States: +1 480 970-1025 (option 1) United Kingdom: + 44 (0) 1908 357 897 Luxembourg: + 352 265 354 11 Singapore: + 65 6725 6415 or visit us on the web at www.lumension.com