Lancope®

Henry County Water & Sewerage Authority Secures and Controls SCADA Systems Using NetFlow and sFlow with Lancope’s StealthWatch Network Behavior Analysis System

~Customizable, Intelligent StealthWatch Interface Saves Time, Money and Resources~

Atlanta, Lancope®, Inc., the provider of the StealthWatch® System, the Best in NetFlow Analysis (http://www.lancope.com/news/08052008.aspx) and the most widely used Network Behavior Analysis (NBA) and response solution, announced today that Georgia’s Henry County Water & Sewerage Authority (HCWSA) is using StealthWatch, with Cisco IOS NetFlow™ and sFlow® data, to diagnose and mitigate security threats, provide metrics for network provisioning, and enable customization of network configurations and policies to better secure and control its SCADA systems.

Located south of Atlanta, Henry County covers more than 320 square miles and is home to more than 119,000 people. The 2005 Census ranked Henry Country as the seventh fastest-growing county in the nation. The Authority’s IT department had been seeking a consolidated solution for network security and operations for three years before ultimately selecting StealthWatch.

By applying behavioral analysis to NetFlow and sFlow data from the network infrastructure, StealthWatch enables detailed forensic analysis, while expediting incident investigation and remediation. Unlike traditional technologies, StealthWatch correlates security and operational data from routers, switches and existing deployments of intrusion detection/prevention systems to deliver a holistic view of network and security infrastructures.

“The breadth of information StealthWatch affords—in conjunction with both definable and built-in heuristics—helps us view all traffic flowing across our networks and security devices,” says Matthew Shoemaker, network / systems engineer for the HCWSA. “With StealthWatch, we can identify security threats, capture statistics and data streams for capacity planning, enforce usage policies, and solve performance problems much faster. It also enables our staff to respond to network threats and outages quickly and intelligently, reducing business impact.”

During the StealthWatch evaluation, the HCWSA also revisited its SCADA system security. The IT staff leveraged StealthWatch to troubleshoot SCADA connectivity issues and to identify network sessions generated by new and existing SCADA equipment.

Shoemaker notes that SCADA systems are “life and limb” to public sector entities like the HCWSA.

“There are considerable security risks associated with even the smallest changes to the system. StealthWatch proved its value immediately by helping us determine the security and effectiveness of our SCADA changes in real time,” he says. Shoemaker also notes that identifying, testing, and remediating similar SCADA problems used to take several weeks. In contrast, “StealthWatch provides measurable results in days,” he notes.

Unlike other event-driven correlation solutions, StealthWatch generates a Concern Index™ (CI) measurement of risky network behavior. Designed to save time and resources, the CI helps network administration quickly identify offending hosts. When risky behavior is observed, StealthWatch generates intelligent alarms in real-time based on CI activity. StealthWatch also separates real-time and historical events to avoid any confusion in the dashboard.

Among StealthWatch’s defining characteristics are its ability to process information from security and network hardware and software, track and correlate a network connection across multiple network segments, provide mechanisms to efficiently mitigate risk in real-time, and present the resulting data from these processes in a customizable, intelligent interface, says Shoemaker. "No other vendor offering was capable of this functionality,” he says.

“Today’s SCADA networks demand flexible, scalable IT solutions for increased security and control,” says Harland LaVigne, president and CEO of Lancope. “Henry County Water & Sewerage Authority is looking to StealthWatch as a comprehensive solution that leverages existing technology investments, while improving network security and performance. This Water Authority joins hundreds of Lancope enterprise customers, including leading utilities and providers of natural gas infrastructure, in using StealthWatch to gain powerful network and security intelligence.”

About Lancope

Lancope®, Inc. is the provider of the StealthWatch® System, the most widely used network behavior analysis (NBA) and response solution that unifies flow-based anomaly detection and network performance monitoring to protect critical information assets and optimize network operations by preventing costly downtime, repair and loss of reputation. StealthWatch streamlines security and network operations into one process, reduces time and resources, and eliminates the costs and complexity associated with non-integrated point products. Both OPSEC and Common Criteria-certified, StealthWatch received the 2008 Best in NetFlow Analysis Award and the 2007- 2008 Global Excellence Awards in NBA. Defending the networks of Global 2000 organizations, academic institutions and government entities, StealthWatch protects hundreds of enterprise customers worldwide, more than all direct competitors combined. A contributing member of the Trusted Computing Group, Lancope also partners with fellow best-of-breed solution providers through its Technology Alliance Program, which includes Cisco Systems, Foundry Networks, IBM Tivoli, Check Point, TippingPoint, ArcSight and A10 Networks. Lancope is a privately held, venture-backed company headquartered in Atlanta, Georgia. For more information, visit www.lancope.com.

###

© 2008 Lancope, Inc. All rights reserved. Lancope®, StealthWatch® and other trademarks are registered or unregistered trademarks of Lancope, Inc. All other trademarks are properties of their respective owners. StealthWatch is covered by U.S. Patent Nos. 7,290,283 and 7,185,368 and other U.S. and foreign patents pending.