[ news_security_news ]
Stealthwatch Gets An Upgrade
SecurityProNews
Staff Writer
2004-11-17
 Insider Reports RSS Feed
Lancope has announced StealthWatch Xe as a key addition to the StealthWatch family of products.
StealthWatch Xe combines the industry's leading security-focused, flow-analysis technology with industry-standard NetFlow data, which is natively available in existing network infrastructure from Cisco, Juniper and other leading vendors, to cost-effectively expand enterprise network protection and optimization. Along with StealthWatch Xe, StealthWatch System 4.2 introduces rich visualization and advanced behavioral detection functionality to improve organizations' ability to defeat worms, internal misuse and other anomalies that significantly impact the availability and integrity of mission-critical networks.
"StealthWatch has clearly established itself as the leading enterprise NBAD solution for rapidly identifying, mitigating and resolving critical threats that circumvent traditional security and network management tools," said Chris Hovis, Lancope's VP of Marketing and Business Development. "Utilizing our proven technology, StealthWatch Xe enables enterprises to fully realize the security benefits of NetFlow data as a cost-effective means of winning their fight against network security incidents, including zero-day attacks and policy violations."
According to Jim Slaby, senior analyst for the Yankee Group, "Enterprises in every industry sector are extending their networks to connect their partners, mobile employees and customers to business-critical applications. The resulting shift in network security architectures, combined with a new class of highly adaptive threats, have created a need for capabilities that neither perimeter firewalls nor signature-based antivirus, intrusion detection, and intrusion prevention systems can deliver. Lancope is addressing this emerging requirement with StealthWatch, a network integrity system that now leverages NetFlow data sources to deliver an innovative solution for flow-based anomaly detection and threat mitigation."
Hovis added, "Strategic deployment across the enterprise of StealthWatch System 4.2, which includes the StealthWatch, StealthWatch Xe and StealthWatch Management Console appliances, provides comprehensive intrusion defense and visualization of network and host-level security intelligence for easy analysis. This enables organizations to preempt, find and fix critical threats in seconds or minutes rather than hours or days.
Lancope's StealthWatch System delivers four significant new capabilities in Version 4.2:
StealthWatch Xe - Cost-Effective Extended Enterprise Protection
StealthWatch Xe delivers unmatched enterprise-wide protection against worms, policy violations and network misuse. The remote collection and analysis of NetFlow data, which is natively available in existing network infrastructure from Cisco, Juniper and other leading vendors, significantly extends the key capabilities of StealthWatch at minimal acquisition and deployment costs. By relieving previous constraints, such as physical proximity requirements and limited span ports, staff or budget, StealthWatch Xe enables enterprises to gain broader, continuous awareness of what is happening across the network versus what should be happening.
Flow Explorer - Rapidly Assess and Analyze the Security Posture and Health of Network
Flow Explorer delivers sophisticated flow visualization of network and host activity and drill-down into underlying details to help security and network analysts quickly assess security posture and network health. Flow Explorer provides a dynamic interface to display the network utilization and intercommunications of hosts and zones. This comprehensive view enables users to further simplify the risk and incident management process, eliminating the manually-intensive process of collecting and poring over log files from disparate sources, including firewalls, routers and signature-based Intrusion Detection Systems (IDS).
Worm Tracker - Expedite Rapid Resolution of Security Incidents
Worm Tracker combines sophisticated search and filter technology with effective visualization of traffic flows to enable rapid investigation and remediation of worm outbreaks. With visual indicators and an easy-to-use workflow, Worm Tracker provides immediate understanding of worm impact and identifies point(s) of entry in order to expedite incident resolution and fortify defenses to prevent recurrence of similar incidents.
Trap Hosts - Early Warning of Emerging Threats
Trap Host functionality is a new behavioral detection method for rapidly detecting worms, misconfigured devices, network reconnaissance, and indiscriminate, low and slow directed attacks. Trap Hosts utilize otherwise idle IP addresses to catch automated worms and hackers that explore the network seeking vulnerable targets. Implemented to identify scanning methods that evade other detection methods, Trap Hosts significantly extends StealthWatch's ability to defend networks against attacks.
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
