Baseline Management System

TBM has studied the configuration verification regulations of all industries after accumulating technologies for years, and has developed a complete set of configuration verification knowledge base. The system is provided with multiple standards of configuration verification knowledge bases, such as security classified protection 2.0, China Telecom, China Mobile, PBC, Sinopec, MIIT, and the Third Research Institute of Ministry of Public Security, and also supports one-click switching, and can comply with the configuration verification demands of different industries.

The system is provided with a huge asset fingerprint base, which can accurately recognize operating system, middleware, database, network equipment, big data components, virtual equipment, industrial control equipment and other types of assets, and maintain a complete asset system by automatic finding or batched import. Besides, it also supports asset grouping as per the department result or asset type, so that users can comprehensively master the asset composition result and compliance within the network environment from the perspective of asset groups.

The product adopts the idea of centralized management and control, realizing the unified management capability of firewall, TVD, EDR, vulnerability scanning and other equipments, which greatly facilitates security operation and disposal work as well as monitoring of security equipment status. It supports real-time monitoring of device status, dynamic awareness of security devices' health, device policy backup and automated comparison of configuration differences, enabling rapid acquisition of security device configuration changes, realization of device policy configuration issuance, and enhancement of security operation efficiency.

The product adopts the industry's mainstream active and passive collection methods to realize multi-vendor, multi-probe, multi-source heterogeneous security data access. The access device type is rich, supporting common firewalls, TVD, EDR, system vulnerability scanning, Web vulnerability scanning, honeypot, intrusion detection, Web attack detection, DDoS detection, database auditing, network auditing and other security devices.