How to ensure uninterrupted monitoring of the operation of sites / servers, and their security?

Question

Monitoring

Good day to all. The question is, there is a very large company that has a large number of servers, and sites on these servers, and they often attempt unauthorized access and download virus software. There was a question in a choice of protection of all this business. At the moment, there is a positive technologies application firewall, I don’t really like it, in general, I would like to get advice on what are the best antiviruses for servers in order to fix and prevent such problems. They also wanted to install a monitoring system for sites (now zabbix), but somehow it doesn’t work very fast. In general, you need the best protection for any money :) What can you advise?)

Answer 1

Very simple. Recruit a team of competent employees and go ahead. Audit, revision, etc.

Answer 2

Hmmm, strange, what did zabbix not suit you with?
Everything must fly, or do you have any specific security problems?

Answer 3

First, separate the questions. :)
Monitor what you want to produce. We use Nagios. It all depends on how much effort you put into configuring monitoring. A lot and with the mind - everything will be fine. Little and without planning - even the coolest system will not justify itself.
Regarding viruses that enter websites, try the classic troubleshooting:
1. What are the reasons for the appearance of viruses?
2. Is it possible to completely or partially correct the situation?
3. What are the methods (regular checking, monitoring changes, limiting access to create files, etc.)?
Something like this.

Answer 4

Take a closer look at the OSSIM system. This is such a combine of various OpenSource solutions (OSSEC, Suricata, OpenVAS), etc.
And in order to protect yourself from various kinds of malware, you need a competent audit + (not advertising) Infowatch Target Attack Detector.