Lancope® PRESS RELEASE
Lancope Ships StealthWatch System 5.6
~New StealthWatch Features Enhance Protection and Network Performance to Benefit Security and Network Operations ~
ATLANTA, March 27, 2007—Lancope, Inc., the leading provider of the StealthWatch™ System, the most widely used Network Behavior Analysis (NBA) and response solution, today announced the general availability of StealthWatch System 5.6. The system-wide upgrade includes powerful new features, including Live Alarms™, High-Performance Flow Queries, Dynamic Data Aging and Storage Optimization, Failover Configuration and interoperability with Foundry Networks’ IronView Network Manager (INM). These features significantly extend the scalability and value of behavior-based anomaly detection and network performance monitoring for enterprise organizations.
A single, unified system for security and network operations, StealthWatch provides detailed views of anomalies and network utilization for security analysts, network engineers and network planners. Visit http://www.lancope.com/news/webinars/ to access “An Exclusive Look at StealthWatch System 5.6,” a Webinar led by Lancope Chief Technology Officer Adam Powers, who describes how each new feature benefits teams within the IT organization.
“Lancope's StealthWatch combines behavior-based anomaly detection with traffic reporting and network optimization data. The resulting visibility enables network teams to efficiently manage complex networks without the need for additional hardware and software. StealthWatch can also detect zero-day, targeted, low-slow and unknown attacks which enhances network operations and security as well.” said Chris Liebert, a senior analyst for Yankee Group.
“With this release of StealthWatch, the best of breed NBA solution, we are delivering even greater functionality to unify network security and operations,” said Harland LaVigne, president and CEO of Lancope. “The delicate balance between business enablement, network availability and security requires a powerful combination of network performance monitoring and behavior-based anomaly detection. The new features in StealthWatch System 5.6 provide security personnel with more focused, actionable views of risk across the enterprise, assist network planners with more historical data for capacity planning and benefit operations personnel with business continuity assurance.”
StealthWatch System 5.6 introduces the following features:
Live Alarmsâ„¢
The ability to view only Live Alarms (the active network events when an administrator accesses StealthWatch) provides time-saving direction that focuses on the most critical incidents impacting the network, and enables security and network administrators to perform root cause analysis. Alarms that are no longer cause for immediate concern remain available for detailed historical analysis within the Alarm Manager.
High-Performance Flow Queries
With greatly accelerated query-response time, StealthWatch System 5.6 provides immediate access to current and historical network flows. Administrators can rapidly query all IP network transactions that have occurred for a suspicious IP or network service, minimizing incident investigation time and maximizing staff productivity. From any graph or table within StealthWatch, administrators can use the context-sensitive “Associated Flows” option to summon the specific flow records that triggered an alarm, alert or graph element. Billions of flows, which can be stored across 25 distributed StealthWatch flow collectors, are available for immediate recall using StealthWatch’s high-speed flow indexing system.
Dynamic Data Aging and Storage Optimization
StealthWatch System 5.6 displays different types of network traffic and network security data as well as how much storage each type consumes. Security and network administrators can optimize the inventory to devote more storage to the most meaningful data. Administrators can now specify how long and in what interval—whether by minute, hour or day, and for weeks, months or years—to store individual data types, such as zone data or interface traffic statistics. The ability to “age” data and specify the required level of granularity gives administrators greater control over and access to critical network intelligence. With historical reference to network activity, administrators can more easily perform network trending analysis over months and years to aid capacity planning.
Enterprise Failover Support
As part of the StealthWatch System 5.6 upgrade, the StealthWatch Management Console (SMC) now provides a failover configuration to support business continuity and disaster recovery. A redundant SMC can be deployed to a disaster recovery center or any other location, providing uninterrupted access to critical network information in times of crisis or system failure. Once in place, the redundant SMC receives a copy of all data sent to the primary SMC and is simultaneously updated with configuration changes made to the primary system. In the event of primary system failure, the back-up SMC stands by in read-only mode until activated by an administrator.
Mitigation via Foundry’s IronView Network Manager
In addition to existing mitigation integration with Cisco PIX firewalls, Check Point firewalls, Cisco routers, TippingPoint’s Intrusion Prevention System (IPS) and ArcSight’s Network Response Manager, StealthWatch System 5.6 can now initiate mitigation actions via Foundry Networks’ INM. As with all of StealthWatch’s optional mitigation actions, INM can be directed to automatically take action, or mitigation can be instituted only under proper authorization from the StealthWatch operator. Through this integration, joint Lancope and Foundry customers can make more precise blocking decisions.
Availability and Pricing
StealthWatch System 5.6 is now shipping with entry-level pricing starting at US $9,995. Current customers can contact the Lancope Customer Care Support Desk for upgrades at 800-838-6574 or support@lancope.com. For more information, please contact the Lancope at 888-419-1462 or sales@lancope.com.
About Lancope
Lancope is the provider of the StealthWatch™ System, the most widely used network behavior analysis (NBA) and response solution that unifies behavior-based anomaly detection and network optimization capabilities to protect critical information assets and ensure network performance by preventing costly downtime, repair and loss of reputation. StealthWatch streamlines security and network operations into one process, reduces time and resources, and eliminates the costs and complexity associated with non-integrated point products. Both OPSEC and Common Criteria-certified, StealthWatch was named Best of Show at Interop2006. Defending the networks of Global 2000 organizations, academic institutions and government entities, StealthWatch protects hundreds of enterprise customers worldwide, more than all direct competitors combined. A contributing member of the Trusted Computing Group, Lancope also partners with fellow best-of-breed solution providers through its Technology Alliance Program, which includes Cisco Systems, Foundry Networks, IBM Tivoli, Check Point, TippingPoint, ArcSight and A10 Networks. Lancope is a privately held, venture-backed company headquartered in Atlanta, Georgia. For more information, call 888-419-1462 or visit www.lancope.com.
# # #
Lancope is a registered trademark and StealthWatch™ is a trademark of Lancope, Inc. All other registered or unregistered trademarks are the sole property of their respective owners.
