NeoAccel Delivers New Level of Network Access Control
499915
NeoAccel, the emerging leader in secure network access solutions, today  announced its NAM-Plus Gatekeeper 2.0 network access control appliance,  which is the first to deliver true application-level access control.
350319
IT managers concerned about deploying blade technology into heterogeneous environments may have an easier time of it with the recent announcement that Brocade&#39;s SAN (storage area network
71330
Access has developed a widget system for its NetFront mobile browser.
509744
Letter: Setting the record straight on network location awareness and Vista Group Policy.
558010
By Anonymous  LAN control  LANShield 3.0 gives enterprises the ability to control who is allowed onto the LAN, restrict what users can do and prevent threats from disrupting network services or compromising data.
710136
This paper looks at the evolution of firewall technology towards Deep Packet Inspection, and then discusses some of the security issues with this evolving technology.
282229
(InfoWorld) - As it develops the next generation of network security infrastructure, Cisco Systems Inc. is planning to cease development on its network admission control (NAC) client, the Cisco Trust Agent (CTA), and submit the source code for the software client to the open source community, Bob Gleichauf, CTO of Cisco's Security Technology Group, told InfoWorld. Cisco has a goal of making the CTA open source within "a couple months," allowing the company to free up development resources for other areas of NAC, Gleichauf said. Cisco's decisionis Â more evidence that Cisco will cede control of the desktop to Microsoft Vista, following a deal in September to use the Microsoft's NAP (Network Access Protection Agent) as the client for both Cisco NAC and NAP. "CTA will be something that's open source. That's just logically where it should end up," Gleichauf told InfoWorld. "We don't want to be in the CTA business, so we're going to just open it up." In September, Cisco and Microsoft unveiled the fruits of a long, cross company effort to integrate their network access control architectures. The plan devised by the two companies called for computers running Windows Vista or Windows Server to include the NAP Agent component as part of the core operating system, and to use that agent for both NAP and NAC. The NAP added support Extensible Authentication Protocol over UDP and EAP-FAST support, developed by Cisco and distributed over Windows Update in addition to native EAP methods and an 802.1X supplicant to enable it to work for both NAC and NAP. Computers running Windows XP with Service Pack 2, as well as non Windows systems, would need to run the Cisco Trust Agent for NAC and run the NAP Agent for NAP. Cisco also promised to continue developing CTA for non-Windows Vista and non-Windows Server âLonghornâ platforms. Since then, however, Microsoft and Cisco have extended both 802.1x and EAP support to Windows XP, reducing the need for the CTA, said Mark Ashida, General Manager of Enterprise Networking Servers at Microsoft. Open sourcing the CTA agent is just part of a much larger effort at Cisco to push beyond mere network access control to a much broader security architecture that addresses problems such as data leaks and policy enforcement -- architecture in which Cisco's Security Agent (CSA) will play a much bigger role, Gleichauf said. "Data leakage is about things crossing boundaries from areas you control to areas where you have less control: e-mail attachments going over IM, or data going from someone in [human resources] to someone in manufacturing who shouldn't see it," he said. "For us, it's all about modeling based on how data moves around. We recognize that data has its own identity, and we want to use the controls we've built up around where users can go -- role based access -- to figure out where data can and can't go," he said. Components like the technology Cisco recently acquired with IronPort will provide some of the intelligence to stop messaging and Web based leaks, and Cisco will use intelligence in its routers and switches to control data flows and in the CSA agent to enforce data-level policies on the desktop, Gleichauf said.Â  "CSA is the next area where you're going to see us make go to market announcements that offer real value in the data leak space," he said. "Cisco's getting out of the desktop plumbing business and focusing on areas on the desktop where they can add value to what they're doing on the network," said Jon Oltsik, an analyst at Enterprise Strategy Group. But Gleichauf's comment may also be an indication that Cisco trying to change the conversation around its NAC architecture, which has been a tough sell with enterprises largely because of the cost of upgrading Cisco and non-Cisco networking infrastructure in order to take advantage of the access control features. While the company has found plenty of buyers for its NAC appliance, formerly known as "Clean Access," it has had far few takers for the full fledged NAC solution. In the meantime, the company has found competition from a wide range of niche NAC vendors, security mainstays like Symantec as well as Microsoft, Juniper and the Trusted Computing Group's standards based Trusted Network Connect architecture. Gleichauf acknowledged that his company hadn't executed well in selling NAC to partners, but said the solution was for Cisco to close the loop even tighter on which firms it will tap to be a part of its solution. "With NAC we got caught in the vendor program race with TNC and Microsoft, where you want to get as many vendors as possible. But there are only a minority of vendors who are value added. The majority of them are just looking for stickers to put on their booth," he said.  Going forward with its data leakage solution, Cisco will rely on a small number of main vendors that offer it more value with license arrangements, rather than rely on open standards, Gleichauf said. That vision concerned Steve Hannah of the Trusted Computing Group, which promotes open standards for network access control that allow third party software to speak a common language when making access control decisions. Releasing the NAC client as an open source application was a fine gesture, but it has little value to the community at large until Cisco agreed to submit its NAC protocols as open standards, he said. "Ultimately, Cisco retains control, and you end up with Cisco as the center of the universe. So customers are stuck buying Cisco gear and looking for things that plug into Cisco gear, but they don't really have a choice of different vendors," said Hannah, who is a distinguished engineer at Cisco competitor Juniper Networks. TCG is happy to talk with Cisco about moving NAC protocols to open standards, perhaps blending NAC technologies from Cisco and TCG to give software vendors and enterprises the most choice, he said. In the end, submitting CTA as an open source application may just be a politically correct way of throwing in the towel on an application that had become irrelevant, said Oltsik. "It's a feel-good move," Oltsik said, but one without much force as long as the NAC protocols used by CTA remain firmly in Cisco's grasp.
389927
(InfoWorld) - Narus Inc. is moving to help service providers scale up their network security, porting its NarusInsight Security Suite (NSS) to blade servers for the first time. NarusInsight is designed to detect IP (Internet Protocol) attacks on carrier networks, such as DDOS (distributed denial of service) and worm attacks, and alert network administrators as well as third-party tools that can halt those attacks. As the size of IP networks and the level of traffic on them grows, Narus aims to help carriers keep tabs on the situation. The Mountain View, California, company will unveil its latest software, NarusInsight Secure Suite 6, on Tuesday at the RSA Conference in San Francisco. With the latest version, it has ported both elements of the system -- data collection and logic servers -- to IBM Corp.'s BladeCenter platform. Carriers can fill a rack with 13 collection blades, each monitoring a network connection as large as 10G bps (bits per second), with one logic blade handling the collected data, said Steve Bannerman, vice president of marketing and product management at Narus. The carriers can also link multiple chassis together and the logic blades will work together as a unit, he said. Previously, the NarusInsight collection servers were available only on Dell Inc. 1U rack-mounted servers. (The logic server can run on any Red Hat Inc. Linux hardware platform.) Blades tend to take up less space and consume less energy than rack-mounted servers, which can be critical issues in crowded service provider facilities. Narus also put a new user interface in NSS 6 to help network managers more quickly interpret incoming data about the network. For example, it will be easier to distinguish the traffic spikes caused by DDOS attacks from those that happen because users are sharing a new music video, Bannerman said. The new version also has built-in software for interoperability with mitigation tools such as Cisco Systems Inc.'s Cisco Guard. Previously, making the third-party tools work with Narus' monitoring system was a separate task, he said. AT&T Inc., Korea Telecom and Japan's KDDI Corp. are among Narus' customers. The company began selling NarusInsight about five years ago, Bannerman said. As carriers move from basic IP transport to providing their own services such as VOIP (voice over IP) and IPTV, they increasingly are the victims of attacks, he said. Meanwhile, enterprises are relying on carriers to keep their networks free of threats and the service providers are seeking added business by offering special security services, Bannerman added. NarusInsight deployments may cost anywhere from US$1 million to $15 million depending on the size of the network and other factors, Bannerman said.
45633
FOUNTAIN VALLEY, Calif., March 9  /PRNewswire/ -- D-Link, the end-to-end networking solutions provider for consumers and business, today announced that it has joined the partner ecosystem supporting Microsoft Network Access Protection (NAP) technology.
213644
A new method to detect and help stop worm attacks being developed by researchers at Penn State University is using the speed of connections to detect the attacks. The system also uses other algorithms to limit the number of false positives
626630
Enhanced midrange storage array, network hardware released.
127123
Safend, an international provider of endpoint i
627885
Narus Inc. is moving to help service providers scale up their network security.
524850
This article is the first of a two-part series that looks at the new generation of WEP cracking tools for WiFi networks, which offer dramatically faster speeds for penetration testers over the previous generation of tools. In many cases, a WEP key can be determined in seconds or minutes.
39305
CA's latest acquisition target rolls out a new version of its identity and access management software.
146050
Updated antivirus software for businesses adds intrusion prevention features.
15007
Workshare announced an updated version of its content-protection suite Monday, adding a network-monitoring appliance to augment the company's standalone desktop-monitoring software.The network-based Protect Network appliance, which monitors outbound network Web, instant messaging, FTP, and mail channels, sits at either the network egress point or in front of critical data repositories. It is designed to prevent unauthorized transmission of content.It works in conjunction with other pieces of the company's Content Protection Group suite, including endpoint-security software, Workshare Protect 6, which monitors for unauthorized content use on the desktop. The Workshare Management System is a centralized policy and management server used to establish content-security policy through Workshare's pattern-matching technology."It analyzes what the content is, including whether encryption should be applied, and prompts the user or stops some kinds of transactions," says Marty Jost, senior director of product marketing. "Workshare will also detect hidden fields in spreadsheets, which users may include by mistake."Workshare makes use of a fingerprinting technology to protect unstructured data through automatic or manual blacklisting and whitelisting and can automatically crawl Microsoft file shares. When Workshare detects potential policy violations, it can notify the manager or block traffic.The latest version of the product provides enterprise-wide distribution and management of the software, making it easier to deploy than the previous version, which was manually installed. Workshare has 130 employees and was founded in 1998 by Barrie Hadfield, CTO, with $20 million in venture capital funding from Steelpoint Capital Partners, Intel Capital, and Quester.London-based Standard Chartered Bank, which has global operations that extend into Asia, Africa, and elsewhere, has tested the Workshare content-protection system and is poised to deploy it to approximately 60,0000 desktops worldwide."As a bank, we have a lot of sensitive information and account data as well as proprietary data," says John Meakin, group head of information security at Standard Chartered Bank. "We have to put in place a mechanism that tracks what happens across the network."Sometimes it's necessary for bank representatives in a mobile environment to share client data under certain circumstances, Meakin says, and Workshare would be useful in applying restrictions, such as checking to make sure data is encrypted before it's transmitted. "Workshare will enable us to see where the information is going and intervene," he says.Workshare Protect 6 costs $30 per seat, and the network-monitoring appliance starts at $5,000.Network World is an InfoWorld affiliate