Posted by Alicia Beuke on Mon, Jun 21, 2010 @ 08:00 AM
StealthWatch Scales to Monitor Large Traffic Volumes and Speeds Incident Resolution across Data Center Networks
Atlanta, June 21, 2010 - Lancope, Inc., the leader in NetFlowTM collection and analysis and the provider of the StealthWatch® System for flow-based network performance and security monitoring, today announced that Telenor Norway, the leading telecom provider in Norway, is using StealthWatch for flow-based security monitoring and incident response across hundreds of network segments and services.
Telenor Norway provides Internet access and services, mobile services, telephony and other fixed services. Telenor Norway is the leading telecom operator in Norway, with a history of more than 150 years. Telenor's service portfolio includes fixed and mobile telephony, broadband and datacom services for residential and business customers, as well as a broad range of wholesale services. StealthWatch monitors traffic for all major data centers related to Telenor Norway's mobile and ISP services, encompassing thousands of UNIX and Windows servers connected to approximately 30 large Cisco access switches.
"Our network sustains more than a million packets per second in traffic," said Henrik Strom, head of IT security for operations in Telenor Norway. "Any IDS solutions would be challenged to inspect all that traffic, much less alert us to potential risks. During our extensive evaluation of security monitoring products, StealthWatch was found to be the only solution that can scale to our needs in terms of network traffic and administration."
Telenor Norway's Security Operations Center is currently the primary user of StealthWatch, with plans to expand usage to network, server and application operations teams. With StealthWatch in place, Telenor Norway's security teams receive greater visibility into data center networks, which they use for incident prevention, response and root cause analysis.
"StealthWatch goes beyond catching worms and denial-of-service attacks to provide a great deal of information about our network," said Strom. "We can see which services are being used and exposed to the Internet, how servers and services communicate, how workstations access production environments and more. The expanded knowledge StealthWatch affords helps our security team focus more on prevention than detection."
StealthWatch pioneered flow-based collection and analysis to unify network performance and security monitoring for end-to-end visibility across physical and virtual networks. Unlike traditional monitoring technologies that require extensive deployments, StealthWatch's award-winning flow-based approach leverages NetFlow to deliver cost-effective network visibility, improve security and optimize network performance. StealthWatch enables security and network operations teams to remediate incidents within seconds, reducing the overall costs of managing and protecting networks.
"StealthWatch enables us to proactively identify issues in our data centers that would otherwise have required tremendous effort to uncover," said Strom. "It indicates which services are being attacked, then we evaluate whether these services require patching, re-configuration or other actions. During services outages, StealthWatch helps determine the root cause of the problem and whether it is a security incident or not. We are very pleased with its rich functionality compared with other products we reviewed, including robust security features, IP-to-country mapping, ad hoc graphing of service traffic, VMware support, extensive documentation and the intuitive Graphical User Interface."
"Lancope is the leader in NetFlow collection and analysis for enterprise-class network performance and security management. Innovative organizations like Telenor Norway recognize Lancope's market leadership of flow-based solutions for total network visibility," said Mike Potts, president and CEO of Lancope. "StealthWatch delivers unmatched scalability, best-in-class problem resolution work flow and the industry's only unified platform for managing network, security and virtual operations."
About Lancope
Lancope®, Inc. is the leader in NetFlow collection and analysis and the provider of the StealthWatch® System for flow-based network performance and security monitoring. Delivering unified visibility across physical and virtual networks, StealthWatch eliminates network blind spots and reduces total network and security management costs. Both OPSEC and Common Criteria-certified, StealthWatch monitors the networks of Global 2000 organizations, academic institutions and government entities worldwide. Lancope also partners with fellow best-of-breed solution providers through its Technology Alliance Program, which includes Cisco Systems, Brocade, Blue Coat, VMware, IBM Tivoli, Check Point, TippingPoint, ArcSight and A10 Networks. Lancope is a privately held, venture-backed company headquartered in Atlanta, Georgia. For more information, visit http://www.lancope.com/.
# # #
©2010 Lancope, Inc. All rights reserved. Lancope, StealthWatch, and other trademarks are registered or unregistered trademarks of Lancope, Inc. All other trademarks are properties of their respective owners.
Media Contacts:
Jody Ma Kissling
Lancope
770-225-6513
jma@lancope.com
Bill Keeler/Lesley Cannata
Schwartz Communications
781 684-0770
lancope@schwartz-pr.com
Posted by Alicia Beuke on Tue, Jun 02, 2009 @ 12:19 PM
ATLANTA, June 2, 2009 - Lancope, Inc., the provider of the StealthWatch® System, the most widely used network behavior analysis (NBA) solution for unified visibility across physical and virtual networks, today announced that its packet sampling flow-based detection of network intrusions has received a fourth newly issued U.S. Patent No. 7,512,980.
The new patent extends the original patent issued in February 2007 for Lancope's flow-based technology using statistical analysis of sampled packets to detect network intrusions. Flow analysis processes network traffic from routers and switches to identify suspicious behaviors without using signatures. Lancope's application of flow-based detection technology helps unify real-time network visibility, performance monitoring and anomaly detection at network speeds up to 10 Gbps, and also improves accuracy and reliability.
Lancope's StealthWatch System uses a flow-based approach to detect intrusions in computer communication networks. Data packets representing communications between hosts in a computer-to-computer communication network are processed and assigned to various client/server flows. Statistics are collected for each flow. Then, the flow statistics are analyzed to determine if the flow appears to be legitimate traffic or suspicious activity. A concern index value is assigned to each flow that appears suspicious. By assigning a value to each flow that appears suspicious and adding that value to the total concern index of the responsible host, it is possible to identify hosts that are engaged in intrusion activity. When the concern index value of a host exceeds a preset alarm value, an alert is issued and appropriate action can be taken.
"With our fourth U.S. patent for flow-based network intrusion detection, Lancope and StealthWatch are again recognized for pioneering technology that streamlines network, security and virtual monitoring into once process, and reduces the time and cost of network security and network operations management," said Harland LaVigne, president and CEO of Lancope. "Our patented technology and innovation derive from meeting our customers' demands for accuracy, speed and reliability in network protection and optimization."
StealthWatch is the first and only flow-based solution to combine network performance monitoring with real-time behavior-based anomaly detection. As a result, enterprises gain network visibility along with improved security and performance. Unlike traditional perimeter-based security technologies that require probes, agents and continuous signature updates, StealthWatch patented flow-based technology leverages flow information from existing routers and switches to lower the cost of monitoring and protecting the network. StealthWatch can stop attacks that other IDS/IPS devices routinely miss without requiring attack signatures, without creating performance bottlenecks on internal network segments and without the need for intricate policy coordination across dozens of IDS/IPS devices.
About Lancope Lancope®, Inc. is the provider of the StealthWatch® System, the most widely used network behavior analysis (NBA) solution that combines flow-based anomaly detection and network performance monitoring. Delivering unified visibility across physical and virtual networks, StealthWatch eliminates network blind spots and reduces total network and security management costs. StealthWatch streamlines security, network and virtual monitoring into one process, reduces time and resources, and eliminates the costs and complexity associated with non-integrated point products. Both OPSEC and Common Criteria-certified, StealthWatch received the 2008 and 2007 Global Excellence Award in NBA. Defending the networks of Global 2000 organizations, academic institutions and government entities, StealthWatch protects hundreds of enterprise customers worldwide, more than all direct competitors combined. Lancope also partners with fellow best-of-breed solution providers through its Technology Alliance Program, which includes Cisco Systems, Brocade, Blue Coat, VMware, IBM Tivoli, Check Point, TippingPoint, ArcSight and A10 Networks. Lancope is a privately held, venture-backed company headquartered in Atlanta, Georgia. For more information, visit www.lancope.com.
# # #
©2009 Lancope, Inc. All rights reserved. Lancope, StealthWatch, and other trademarks are registered or unregistered trademarks of Lancope, Inc. All other trademarks are properties of their respective owners. StealthWatch is covered by U.S. Patent Nos. 7,290,283; 7,185,368; 7,475,426; 7,512,980 and other U.S. and foreign patents pending.