Content Preview: rss
1385 days ago
Magic Quadrant for Network Intrusion Prevention System Appliances, 2H05 30 November 2005 Greg Young John Pescatore Source: Gartner Note Number: G00133189 The network intrusion prevention system appliance market is in a period of maturity and consolidation. A smaller group of vendors are getting an increasing percentage of the market, but the evolving threat means that those that fail to maintain innovation ahead of market demands will be left behind. What You Need to Know Network intrusion prevention system (IPS) can detect and block attacks, such as worms, and act as a pre-patch shield for systems and applications. The Sasser and Zotob worms have driven network IPS to be ready for enterprise use. The market for network IPS appliances is entering a phase of maturity and consolidation. The significant benefits of an in-line attack-blocking technology can only be realized with a product that fits your security ...1463 days ago
Discover how an SOC helps you fight intruders from the confines of a safe house. You wouldn't go into battle without a trusted group of generals strategizing your best attacks and defenses, so why try to secure your data without an infosec team and plan? If you don't have a dedicated security operations center and staff, you'll be scrambling to shore up your defenses, even as the bad guys are invading your system. A SOC can be as simple as a set of offices or cubicles next to each other, or as sophisticated as a standalone complex with extra-large displays, two-factor physical security and a budget to match. Typically, only the largest companies have the resources to build and staff a dedicated SOC. In a recent survey of Secure Enterprise readers, 72 percent of respondents with fewer than 5,000 employees had no plans to build a SOC. Among the 28 percent who have a SOC or plan to build one, 53 percent will collocate in the network operations center, which makes sense ...1464 days ago
Introduction Computer security technology is still in its infancy. Technologies such as firewalls, antivirus, and IDS have migrated from research labs into production networks, and have become required mainstays both as essential defenses and as legally mandated compliance systems. Computer security systems are complex devices that need to meet a variety of conflicting goals: high performance, fault tolerance, easy administration – and rigorous security processing. Some vendors have staked their claim based on speed, others on cost, and still others on the defensive posture and security of their products. Unfortunately, it’s extremely difficult for the customer to sort through marketing fluff and dubious benchmarks, to determine which products actually work and which merely appear to work. Few customers are sufficiently sophisticated or willing to take the time to do their own testing and most are forced to rely on published results from trade magazines, ...
1645 days ago
Intoto, a provider of integrated security, wireless and voice software platforms to networking equipment manufacturers, announced that it will demonstrate its advanced enterprise-class security solutions at the Fall 2004 Network Systems Design Conference. The high-performance security solutions feature Intoto's iGateway EX software platforms running on security processors from Cavium Networks and Hifn, and a communications processor from Broadcom. Additionally, Intoto will showcase its IntruPro(TM) product line, a complete intrusion prevention system for enterprise environments. The demonstrations will be held in Intoto's booth #616. "Intoto's security software offerings, with iGateway EX and IntruPro, enable networking equipment vendors to rapidly and cost-effectively develop feature-rich integrated security appliances and gateway devices suitable for a wide range of products addressing small to large enterprises," said Doug Makishima, vice president of ...
1645 days ago
SSL VPN是一种新型VPN（虚拟专用网络），它在支持应用类型、认证集成以及其他一些安全功能方面都表现出独有的特点。 SSL VPN技术帮助用户通过标准的Web浏览器就可以安全访问重要的企业应用。这使得企业员工出差时不必再携带自己的笔记本电脑，仅仅通过一台接入了Internet的计算机就能访问企业资源，这为企业提高了效率也带来了方便。由于SSL VPN不像IPSec VPN那样要购买和维护远程客户端或软件，因而要比后者造价低很多。SSL VPN网关位于企业网的边缘，介于企业服务器与远程用户之间，控制二者的通信。 SSL VPN主要优点有哪些？ 无需安装客户端软件：在大多数执行基于SSL协议的远程访问是不需要在远程客户端设备上安装软件。只需通过标准的Web浏览器连接Internet，即可以通过网页访问到企业总部的网络资源。这样无论是从软件协议购买成本上，还是从维护、管理成本上都可以节省一大笔资金，特别是对于大、中型企业和网络服务提供商。 适用大多数设备：基于Web访问的开放体系可以在运行标准的浏览器下访问任何设备，包括非传统设备，如可以上网的电话和PDA通讯产品，这些产品目前正在逐渐普及。 适用于大多数操作系统：可以运行标准的浏览器的大多数操作系统都可以用来进行基于Web的远程访问，不管操作系统是Windows、Unix还是Linux。可以对企业内部网站和Web站点进行全面的访问。用户可以非常容易地得到基于企业内部网站的资源，并进行应用。 支持网络驱动器访问：用户通过SSL VPN通信可以访问在网络驱动器上的资源。 良好的安全性：用户通过基于SSL的Web访问并不是网络的真实节点，就像IPSec安全协议一样，而且还可代理访问公司内部资源。因此，这种方法可以非常安全，特别是对于外部用户的访问。 减少费用：为那些简单远程访问用户（仅需进入公司内部网站或者进行E-mail通信），SSL VPN可以非常经济地提供远程访问服务。 ...
