LANCOPE ANNOUNCES STEALTHWATCH V4.0
ATLANTA, Ga., February 24, 2004
Lancope, Inc., the leading provider of behavior-based threat detection and network intelligence solutions, today announced significant upgrades to its StealthWatch™ system, which includes StealthWatch v4.0 and StealthWatch Management Console™ v4.0. The new StealthWatch system delivers advanced intrusion defense by extending beyond rapid detection of zero-day and known attacks to include flexible mitigation actions that defend the network core as well as the perimeter. With several new features, including integration with traditional signature-based Intrusion Detection Systems (IDSs), OS fingerprinting and insightful advanced reporting, StealthWatch further optimizes the security, availability and utilization of the network while leveraging organizations’ infrastructure investments.
The StealthWatch system delivers four significant new features:
Adaptable Threat Mitigation
StealthWatch combines flexibility and interoperability to deliver adaptable mitigation of threats from inside and outside the network. Now interoperating with existing network and security infrastructure from leading vendors such as Cisco and Check Point, StealthWatch minimizes the impact of zero-day and known attacks as well as internal misuse. StealthWatch provides flexible configuration of threat responses on a per alarm basis within each Virtual Security Zone™ through an innovative zone-based architecture: Alarm, Authorize and Automatic. Network activity can be blocked for varying duration based on source/destination IP address and/or port. Extending beyond alarming capabilities, the Authorize mode allows the administrator to authorize “blocking-on-demand” while reviewing alarm details. The Automatic mode enables mitigation of nefarious activity without requiring human intervention and support for configuration flexibility.
Third-party Alert Integration
In this enhanced version, the StealthWatch Management Console integrates with traditional signature-based IDS solutions from ISS and Snort to receive alerts via SNMP or syslog for centralized real-time analysis of network events. By correlating data and aggregating events across threat detection methods, StealthWatch users can rapidly qualify signature-based events to determine if they are legitimate attacks. This integrated approach provides extensive network context and attack information to assist with forensic analysis and offers additional perspective on the network security events that generate StealthWatch alarms.
Operating System (OS) Fingerprinting
With the introduction of OS fingerprinting, StealthWatch provides additional security and network intelligence that is valuable for discovery of unauthorized network activity, asset inventory and risk assessment. By analyzing each host’s systematic response in network communications, StealthWatch assembles valuable information about hosts on the network in order to provide enhanced network awareness and facilitate threat analysis.
Insightful Reporting
StealthWatch and the StealthWatch Management Console offer insightful reporting through summarization and visualization of network and security data collected across the enterprise. These advanced reports facilitate trend analysis and operational management by providing real-time and periodic measurement of the security posture and operations of network. Both executives and administrators can easily drill-down into reports to examine various views of the network from summary to alarm to host level.
According to Eric Ogren, senior analyst, Security Solutions & Services for the Yankee Group, “Network security is a rapidly evolving space. The traditional approach of defending the perimeter and relying on signature-based technologies is inadequate – it not only creates massive data overload but also continues to leave networks vulnerable. Innovative behavior-based network integrity solutions, such as Lancope's StealthWatch, answer the growing demands of network security by maintaining integrity from the perimeter to the network core and bridging the gap between security and network operations.”
“Lancope recognizes the extensive investments in network infrastructure and security solutions that play a role in today’s required layered security approach,” said Harland LaVigne, president and CEO of Lancope. “The enhanced StealthWatch system integrates seamlessly with existing technologies to leverage these investments. Responding to growing demands from our rapidly expanding customer base, StealthWatch v4.0 enables organizations to more effectively and cost-efficiently ensure the integrity of their valuable network assets and operations.”
The StealthWatch system, which includes StealthWatch, StealthWatch+Therminator and StealthWatch Management Console, provides enhanced network and host level security as well as powerful visualization of network activity in order to optimize security and network operations. Enabled by its patent-pending flow-based architecture, StealthWatch defeats zero-day attacks without signatures, exposes unauthorized applications and misconfigured network devices, monitors network performance and delivers insightful forensic analysis. Recent adopters of StealthWatch include Boyd Gaming, Nielsen Media Research, Rand-McNally, Stanford University School of Medicine, Northwestern University, Naval Postgraduate School and Georgia Technology Authority.
Availability and Pricing
StealthWatch v4.0 and StealthWatch Management Console v4.0 will be generally available in March 2004. Pricing for StealthWatch will begin at $9,995. Pricing for the StealthWatch Management Console is also $9,995 plus additional fees per managed StealthWatch appliance. Current customers can contact Lancope Customer Care Support Desk for upgrades at 800-838-6574 or via email at support@lancope.com.
About Lancope and StealthWatch
Founded in 2000, Lancope is the leading provider of next-generation network integrity solutions that deliver behavior-based threat defense, policy enforcement and insightful network intelligence. With integrated visibility across network security, traffic characteristics and host-level activity, Lancope's StealthWatch solutions provide unparalleled network protection and optimization. Both OPSEC and Common Criteria certified, StealthWatch has received numerous accolades. Most recently StealthWatch received a 5-star rating for technology excellence from CRN Magazine. In addition, StealthWatch has received the Innovation In Infrastructure Award from eWeek and PC Magazine and was honored "Most Impressive" by eWeek. Defending the networks of Global 2000 organizations, academic institutions and government entities, Lancope protects the critical assets of today's sophisticated enterprises. For more information, visit www.lancope.com.
