System for remotely monitoring status information of devices connected to a network
View Patent ↗A system for monitoring the status of one or more networks and/or of devices coupled to each of the one or more networks. Status monitoring applications are associated with the networks and/or devices. The status monitoring applications output a respective status log file containing information about the system status of the associated network or device. In one embodiment, the system status is derived from the Windows Event Log. The status monitoring applications are coupled to a remote receive module via a one-way data link or a firewall. The remote receive module receives the log files and processes the log files to either identify any unauthorized status conditions identified therein or to generate a cumulative log file consisting of events occurring over a predetermined time interval.
1. A system for monitoring status of a first and second network and/or of devices coupled to the first or second network, comprising:
a send node;
a first status monitoring application associated with the send node which outputs a first status log file containing information about status of a first network coupled to the send node and/or of any first devices coupled to the first network;
a receive node coupled to the send node via a data link;
a second status monitoring application associated with the receive node which outputs a second status log file containing information about status of a second network coupled to the send node and/or of any second devices coupled to the second network; and
a receive application for receiving and processing the first status log file and the second status log file to either identify any unauthorized status conditions identified in the first status log file and/or the second status log file or store the first status log file and/or the second status log file;
wherein the data link is a one-way data link, wherein the send node is on a first server and is only able to send data over the one-way data link, wherein the receive node is on a second server and is only able to receive data over the one-way data link, and wherein the first server is coupled to the second server only via the one-way data link.
2. The system of claim 1 , wherein the receive application is on a third server, separate from the first server and the second server.
3. The system of claim 2 , further comprising:
a first communications link for coupling the first status monitoring application to the receive application; and
a second communications link for coupling the second status monitoring application to the receive application.
4. The system of claim 3 , wherein the first communications link transfers the first status log file from the first status monitoring application to the receive application and wherein the second communications link transfers the second status log file from the second status monitoring application to the receive application.
5. The system of claim 4 , wherein the first communications link and the second communications link are one-way data links.
6. The system of claim 2 , wherein the first status monitoring application outputs the first status log file to the one-way data link and further comprising:
a pass-through circuit associated with the receive node for receiving the first status log file from the one-way data link; and
a communications link for coupling the second status monitoring application and the pass-through circuit to the receive application.
7. The system of claim 6 , wherein the communications link transfers the first status log file from the pass-through circuit to the receive application and the second status log file from the second status monitoring application to the receive application.
8. The system of claim 7 , wherein the communications link is a one-way data link.
9. The system of claim 1 , wherein the information included within the first status log file indicates whether a removable storage device is mounted on any of the first devices and the information included within the second status log file indicates whether a removable storage device is mounted on any of the second devices.
10. The system of claim 1 , wherein the first status log file is created by the first status monitoring application to include the information about status of the first network coupled to the send node and/or of any first devices coupled to the first network; and wherein the second status log file is created by the second status monitoring application to include the information about status of the second network coupled to the send node and/or of any second devices coupled to the second network.
11. The system of claim 1 , wherein the first status log file is a preexisting log file which is modified by the first status monitoring application to add the information about status of the first network coupled to the send node and/or of any first devices coupled to the first network; and wherein the second status log file is a preexisting log file which is modified by the second status monitoring application to add the information about status of the second network coupled to the send node and/or of any second devices coupled to the second network.
12. A system for monitoring status of a first network and/or of devices coupled to the first network, comprising:
a send node;
a first status monitoring application associated with the send node which outputs a first status log file containing information about status of a first network coupled to the send node and/or of any first devices coupled to the first network;
a receive node coupled to the send node via a data link; and
a receive application for receiving and processing the first status log file to either identifying any unauthorized status conditions identified in the first status log file or to store the first status log file; wherein the data link is a one-way data link, wherein the send node is on a first server and is only able to send data over the one-way data link, wherein the receive node is on a second server and is only able to receive data over the one-way data link, and wherein the first server is coupled to the second server only via the one-way data link.
13. The system of claim 12 , wherein the receive application is on a third server, separate from the first server and the second server.
14. The system of claim 13 , further comprising a first communications link for coupling the first status monitoring application to the receive application.
15. The system of claim 14 , wherein the first communications link transfers the first status log file from the first status monitoring application to the receive application.
16. The system of claim 15 , wherein the first communications link is a one-way data link.
17. The system of claim 13 , wherein the first status monitoring application outputs the first status log file to the one-way data link and further comprising:
a pass-through circuit associated with the receive node for receiving the first status log file from the one-way data link; and
a communications link for coupling the pass-through circuit to the receive application.
18. The system of claim 17 , wherein the communications link transfers the first status log file from the pass-through circuit to the receive application.
19. The system of claim 18 , wherein the communications link is a one-way data link.
20. The system of claim 12 , wherein the information included within the first status log file indicates whether a removable storage device is mounted on any of the first devices.
21. The system of claim 12 , wherein the first status log file is created by the first status monitoring application to include the information about status of the first network coupled to the send node and/or of any first devices coupled to the first network; and wherein the second status log file is created by the second status monitoring application to include the information about status of the second network coupled to the send node and/or of any second devices coupled to the second network.
22. The system of claim 12 , wherein the first status log file is a preexisting log file which is modified by the first status monitoring application to add the information about status of the first network coupled to the send node and/or of any first devices coupled to the first network; and wherein the second status log file is a preexisting log file which is modified by the second status monitoring application to add the information about status of the second network coupled to the send node and/or of any second devices coupled to the second network.
23. A system for monitoring status of a second network and/or of devices coupled to the second network, comprising:
a send node;
a receive node coupled to the send node via a data link;
a second status monitoring application associated with the receive node which outputs a second status log file containing information about status of a second network coupled to the send node and/or of any second devices coupled to the second network; and
a receive application for receiving and processing the second status log file to either identify any unauthorized status conditions identified in the second status log file or store the second status log file; wherein the data link is a one-way data link, wherein the send node is on a first server and is only able to send data over the one-way data link, wherein the receive node is on a second server and is only able to receive data over the one-way data link, and wherein the first server is coupled to the second server only via the one-way data link.
24. The system of claim 23 , wherein the receive application is on a third server, separate from the first server and the second server.
25. The system of claim 24 , further comprising a second communications link for coupling the second status monitoring application to the receive application.
26. The system of claim 25 , wherein the second communications link transfers the second status log file from the second status monitoring application to the receive application.
27. The system of claim 26 , wherein the second communications link is a one-way data link.
28. The system of claim 23 , wherein the information included the second status log file indicates whether a removable storage device is mounted on any of the second devices.
29. The system of claim 23 , wherein the first status log file is created by the first status monitoring application to include the information about status of the first network coupled to the send node and/or of any first devices coupled to the first network; and wherein the second status log file is created by the second status monitoring application to include the information about status of the second network coupled to the send node and/or of any second devices coupled to the second network.
30. The system of claim 23 , wherein the first status log file is a preexisting log file which is modified by the first status monitoring application to add the information about status of the first network coupled to the send node and/or of any first devices coupled to the first network; and wherein the second status log file is a preexisting log file which is modified by the second status monitoring application to add the information about status of the second network coupled to the send node and/or of any second devices coupled to the second network.