LANguard S.E.L.M. performs intrusion detection by network-wide monitoring of the security event logs of all NT/2000 servers and workstations. Extensive reporting identifies machines being targeted as well as local users trying to hack. Unlike network-based IDS, LANguard is not impaired by switches, encryption or high-speed data transfer.
