AEP Networks and Vados Systems Combine to Offer Secure Networking and Identity-Based Access Management Over Converged Integrated Solutions
565991
AEP Networks, the leader in policy-based networking, and Vados Systems, a provider of Converged Integrated Solutions, announce the interoperability of AEP's SmartGate application layer VPN with Vados' range of communications solutions.
161623
Identity 2.0 company Sxip releases a new login and password management
706573
By Anonymous  Security management The SAFE solution allows administrators to define, document, deploy and enforce physical security policies across multiple system platforms and facility sites.
329205
Online security service adapts as you roam Roaming internet access specialist iPass is getting into device security via a deal with Symantec.â¦
735988
sentitO Networks and Stealth Communications today announced the successful interoperability of sentito's Open Network Exchange (ONX) IVG1200 Intelligent Voice and Proxy7 Signaling Gateways with Stealth's Voice Peering Fabric (VPF) ENUM Registry.
759882
Intel's move to provide new integration with NAC (network access control) tools in its latest vPro desktop processors could provide interesting opportunities for use with the device authentication systems while further strengthening the technology standards it supports, according to industry watchers.
488709
F-Secure ha annunciato che la sua tecnologia per la protezione dei dispositivi wireless F-Secure Mobile Anti-Virus sarÃ  disponibile con il nuovissimo smartphone multimediale Nokia 7710, presentato ieri alla Nokia Mobility Conference di Monaco e al
683354
Two vendors are releasing products for the enterprise that enable what they claim is seamless switching between cellular and standard voice-over-IP calls.
716663
Networked multifunction devices share PC vulnerabilities to worms, hackers.
383169
Grid architecture aims to protect corporate networks from interior security threats.
303627
(Source: ForeScout) Are you confused about Network Access Control? You are not alone. Today's enterprises are facing a growing challenge in securing access to their networks as the number of corporate mobile users and contractors increase. Adding to this challenge is the difficulty of integrating network security solutions into existing complex and diverse enterprise network infrastructures. Download this white paper and find out how to implement a flexible, comprehensive NAC solution for your company.
382070
Juniper Networks, Inc. (NASDAQ:JNPR), the leader in high-performance  networking, today confirmed its Intrusion Detection and  Prevention (IDP) security systems and ISG firewall/virtual private  network (VPN) systems with IDP offer protection for new Microsoft  vulnerabilities announced today.
382411
(InfoWorld) - Intel's move to provide new integration with NAC (network access control) tools in its latest vPro desktop processors could provide interesting opportunities for use with the device authentication systems while further strengthening the technology standards it supports, according to industry watchers. One of a handful of new security features built into the vPro Core 2 Duo chips introduced by Intel on Monday, the added support for the 802.1x standard for NAC and interoperability with Cisco's Network Admission Control guideline -- delivered via the processors' Intel Embedded Trust Agent -- could help accelerate adoption of the device authentication systems while solidifying support for the two formats, experts said. NAC systems are used to scan device and user authentication information whenever a machine attempts to log onto to a network protected by the tools. In addition to protecting against potential break-ins from uninvited outsiders, the tools are also considered a useful alternative for enterprises to employ in segregating access to IT systems shared with partners or contractors. Using the Embedded Trust Agent, Intel said that it can now provide NAC systems -- including any built on the 802.1x or Cisco NAC platforms -- to garner device identity information directly from processor, bypassing the need for the authentication technologies to interact with PC operating system software. One of the potential methods to circumvent NAC systems outlined by security researchers thus far has been to use some method to spoof or misrepresent device information to dupe the network defense tools. By presenting machine identity data on the processor, such attacks could be largely eliminated, Intel officials said. While Intel did not promote direct linkage between Embedded Trust Agent and Microsoft's flavor of NAC -- known as Network Access Protection and already integrated into the software giant's Vista OS -- Cisco and Microsoft have previously announced an agreement to make all of their respective network authentication systems compatible. Similar support for NAC on mobile platforms will arrive with Intel's next batch of Centrino chips, slated for shipment sometime in 2008, said company officials. Cisco officials participating in Intel's vPro launch said that the CPU-level NAC integration could prove to be a significant accelerant to adoption of the technology, which most industry experts have charted as relatively slow thus far, despite the networking giant's claim that many of its customers are tuning on the next-generation authentication systems. "The strength of NAC is certainly based on the reliability of the information that you can present to the network, and having direct access to information on the hardware provides a whole new opportunity that hasn't been present only with OS interaction," said Brendan O'Connell, senior product manager for Cisco's Security Technology Group. "In the past, even with existing NAC systems, what's happened is that when a PC starts up on the network, the security decision is held off while other things are being run in the background, but we're hoping to see that change and get in the door earlier," he said. "There are some big advantages for getting this type of information to present device security posture assessment sooner in the process, both for desktops and down the road for other types of devices." Chip technology providers have attempted to market similar CPU-based security tools -- most notably Phoenix Technologies -- but those efforts have gone largely ignored by customers with Phoenix recently scrapping its core software security products based on insufficient demand. Other third-party NAC technology providers said that Intel's move to embrace NAC should help drive new interest in the systems and codify the industry around the standards it has chosen to support. "On a functional level, this should prove useful by speeding up testing. Instead of waiting for a machine to boot up to get a posture assessment, the NAC system will already recognize the machine's attributes and begin assigning privileges," said Alan Shimel, chief strategy officer for StillSecure, a maker of NAC software. Shimel pointed out that while a nice addition, most NAC systems will still need some form of user identification data, typically provided via software that runs on a device OS, to offer full authentication capabilities. "It will be interesting to see if AMD adopts a similar approach and the same standards; that could have a good effect on the industry as a whole," he said. "It's good to see that Intel is supporting 802.1x because that's the standard most other NAC vendors are working with." While CPU-level integration is a nice addition, some industry watchers maintain it will still be some time before NAC is deployed widely by large numbers of enterprise customers. Because NAC doesn't directly address external threats or efforts to comply with government regulations, such as the Payment Card Industry data security guideline, most companies aren't yet budgeting for NAC tools, said Paul Stamp, analyst with Forrester Research. "The problem with NAC is that in itself it satisfies no compliance mandate directly, and it doesn't protect against any specific type of attack. The real driver for NAC will be when businesses begin to demand so much mobility and collaboration that current security technologies can't meet those goals," Stamp said. "People are struggling to find a driver for NAC right now, and this type of platform-level interaction could be important when they do, but it could be another five years before we see real demand."
252614
Vendors have begun to release products that are taking the next steps in the evolution to true services-centric networking.
570924
The companies plan to share security features to help customers protect their networks from worms and viruses.
635804
(InfoWorld) - Enterprise companies will soon begin offloading many of their network security responsibilities to telecommunications and Internet service providers and save vast amounts of time and money doing so, if AT&T has its way. Speaking to the assembled crowd at the IDC Security Forum in New York on Wednesday, Edward Amoroso, chief security officer for AT&T's services division, predicted that enterprises will begin adopting more "virtual" security capabilities from their ISPs and bandwidth providers in the coming years as those companies are better positioned to do battle with botnets, spam, and denial-of-service )DoS) threats. Based on the bandwidth-providers' existing abilities to see spikes in traffic that are tell-tale signs of botnet, spam, or other malware activity -- long before enterprises can see evidence of the attacks on their own -- Amoroso contends that companies will soon concede the process of fighting the threats and turn to companies such as AT&T for help. "We think that security at the perimeter should be virtual, which is a somewhat controversial concept, because a lot of time, effort, and career capital has already been spent securing the perimeter," Amoroso said. "But we think a lot of existing technologies there are running out of legs, and simply running firewalls at the gateway is no longer a valuable proposition." The United States government's Telecommunications act of 1996 prevents carriers from approaching customers and marketing services to them based on any trends they observe on the end users' network connections. However, the companies can already identify much of the spam and malware activity being carried out in the pipe, based on their massive infrastructure, and should be enlisted to help solve security issues, he said. For threats such as distributed DoS that can easily be thwarted upstream, the CIO said, it makes little sense for companies to continue to invest in new technologies and staff when the carriers could easily detect and snuff out the campaigns ahead of time. "How do you stop DDoS at the edge? The physics just don't make sense. When these attacks happen, the customers' routers will already be dead," said Amoroso. "We think the idea that the pipe should be dumb is strange; with spam accounting for 90 percent of all traffic on the e-mail pipe, we're delivering nothing but more attacks, malware, and junk. If people want us to keep doing that we can, but why would they want us to keep doing that when we can see it, scoop it, study it, and stop it?" Lest someone should contend that AT&T and other carriers are merely licking their chops at the prospect of adding pricey new security services to their products, the expert said security services should eventually become a set of non-optional capabilities included with the purchase of ISP and telephony services. Much as the carrier community focused on providing faster services in the 1980s and added tools to improve quality to their products in the 1990s, the CIO said that security services will become a de facto element of all the capabilities that the firms market. While early adopters are already paying a premium to use the security capabilities offered by carriers today, eventually the price should be blended into the packages of capabilities that companies buy from providers such as AT&T, the expert predicted. At the same time, AT&T and other carriers would have to sacrifice their existing businesses of selling firewall management and intrusion detection-type systems into enterprises, he said. But the move to push security tools to the bandwidth providers is one that has been made even more likely by the complexity of those technologies. "I think we'll come out of this decade thinking it was silly to have separate perimeter security systems, it doesn't make sense to build the network and overlay security as an afterthought," Amoroso said. "We have as large of a managed security services business as anyone, but this work is better off embedded in the pipeline." Emerging mobile and Voice over Internet Protocol (VoIP) services will also include integrated security capabilities that replace many of the systems being implemented to protect those technologies today, according to the AT&T CIO. "We can virtualize these things, and any carrier can do it; this is the direction that perimeter security is headed in. It's not a collision course, but rather something very pleasant, as finally there's something smooth and simple to solve these problems," he said. "It's absurd that all we hear today is that the carrier plays no role in all of this, that companies should do it at the edge. We know it's a lot of work, but we're already prepared to do it."
100727
DataPower announced its demonstration of real-world Web service deployments with customers utilizing WS-Security and SAML for federated authentication and authorization across domains to partners and customers.