ArcSight has acquired ENIRA to add remediation to their offerings. I'll just do a quick post because I've never heard of ENIRA and probably neither have you. This deal by ArcSight validates what I've been saying for months. You need to be able to remediate. Information gleaned from the rear view mirror without the ability to solve the problem is just not interesting to customers.

It will be interesting to see how ArcSight packages ENIRA's technology, given it's kind of like NAC (in that it reconfigures networks based upon events and policies) and how they evolve their own platform. I mentioned in this morning's TDI [0] about a review on SIM products done by Network Computing. One of the interesting tidbits in the text was pricing. ArcSight still has a very heavy enterprise software pricing model that penalizes customers for adding more devices. Folks like LogLogic that have a flat fee, without per device charges make the technology more accessible. And given a driver for SIM is compliance, then having all applicable devices covered is just crucial.

So, this is shape of things to come. In the next 12 months, all of these folks either need to start eating or be eaten. If they are going to start eating, hooking up with a patch/configuration management player is a good place to start.