Bellcore has a security tool called SysGuard that has two components, a set of host tools and a Security Manager. The host tools reside on each host machine and generate logs files with information pertaining to security problems for that machine. The information in these files are periodically retrieved by the Security Manager and stored in a data base for analysis. There is also real time alerting when a parameter is exceeded (i.e., repeated login failures). We also have PINGWARE and S/KEY. PINGWARE scans you TCP/IP network for know vulnerabilites and generates a report indicating the machines that can be compromised and by which method. S/KEY is a one-time password system that allows users to access computers from outside their secure domains and which does not require any hardware (e.g., batteries, credit card type IDs). If you want additional information about any of these products, please feel free to contact me. -- June >-------------------------------June C. Ralph > Security & Data Services Dev. Group > ralph1@cc.bellcore.com > RRC-1A216 > (908) 699-4647