Software aids network behavioral analysis and response.
Share:
Press Release Summary:
StealthWatch(TM) System v5.7 offers behavior-based anomaly detection and network performance monitoring for enterprise organizations. Capabilities leverage NetFlow data to provide enhanced network visibility and detailed intelligence for optimizing security and network operations. Along with geographical reporting and trending, solution offers host trending, QoS reporting and trending, as well as DHCP server integration and autonomous system reporting.
Original Press Release:
Lancope Announces StealthWatch System 5.7
New Version Enhances Visibility and Significantly Extends Value of Behavior-based Anomaly Detection and Network Performance Monitoring across the Enterprise
ATLANTA, Nov. 7 -- Lancope(R), Inc., the provider of the StealthWatch(TM) System, the most widely used network behavior analysis (NBA) and response solution, today announced StealthWatch System 5.7, a system-wide upgrade that delivers powerful new features which significantly extend the value of behavior-based anomaly detection and network performance monitoring for enterprise organizations. In this latest release, StealthWatch introduces the following new capabilities that further leverage NetFlow data to provide enhanced network visibility and detailed intelligence for optimizing security and network operations.
Security Features
-- Northbound Web Services API
-- Behavioral Baselining Engine v2.0
-- Geographical Reporting and Trending
-- Host Trending
-- DHCP Server Integration
-- Document Builder
Network Operations Features
-- Quality of Service (QOS) Reporting and Trending
-- Autonomous System Reporting
-- Zone Top Ten Statistics
-- DHCP Server Integration
-- Document Builder
"The ability to correlate end-users' identities, as well as IP and MAC addresses, with anomalous network traffic patterns is important for enterprise IT security professionals," said Phil Hochmuth, senior analyst with Yankee Group. "The addition of DHCP server and Microsoft Active Directory integration in Lancope's StealthWatch System 5.7 allows enterprises to monitor, analyze and react to potentially harmful network activity as it occurs."
Vanessa Alvarez, associate analyst at Yankee Group, added, "Visibility across the entire network is vital in protecting today's network environment. Extending its performance monitoring strengths to include QoS, StealthWatch provides detailed intelligence about endpoints and applications, how they normally behave over the infrastructure and when they are adversely affected - which is mandatory information for identifying complex problems quickly."
StealthWatch System 5.7 delivers the following key capabilities:
Security Focus
Integrate StealthWatch Visibility Into Enterprise Applications - Through the flexible SOAP-compliant API, administrators can now access host, flow and probe data from StealthWatch through several applications to increase staff productivity with a more focused approach to rapid problem resolution.
Rapid Identification of Problems with Reduced Maintenance - Introducing the Behavioral Baselining Engine v2.0, StealthWatch delivers greater precision in detecting network and security problems while further minimizing maintenance efforts. StealthWatch's new Visual Tolerance Editor, which allows customized alarm variances relative to continuously optimized baselines, enables risk-based security policy management through improved alarming accuracy and reduced operational costs.
Track Interactions with External Systems by Country - StealthWatch now automatically associates external devices with their country of origin, enabling administrators to quickly report on top-talkers and zone locking as well as easily query for alarms, flows, probes and host information.
Investigate Historical Host Activity - Providing a historical reference to host activity, StealthWatch now allows administrators to rapidly identify hosts matching any number of parameters and richly display host behaviors over time, weeks or months, to proactively identify potential problems and discover affected hosts.
Network Focus
Monitor Quality of Service Deployments - With the addition of Quality of Service reporting and trending, StealthWatch provides the critical visibility needed to ensure actual traffic passing through individual interfaces matches configured or desired traffic levels for each service.
Determine Autonomous System Transit - StealthWatch now offers Autonomous Systems Reporting for extended network visibility to aid trending analysis and capacity planning.
Identify Top Talkers by Zone - Extending the per-interface view of top talkers, StealthWatch segments Top Ten statistics by hosts, flows, and services to provide an additional layer of intelligence for investigating network slowdowns or traffic spikes.
Security and Network Operations
Improve System Identification via DHCP Server Integration -StealthWatch ID-1000 now integrates with DHCP servers to provide additional information about hosts, including the MAC address, that further improve audit and control information for regulatory compliance.
Create Relevant Dashboards and Custom Reports -StealthWatch's Document Builder now offers numerous, extensive components from which administrators can easily build flexible dashboard(s) for custom views of critical Enterprise activity to enable faster identification of problems.
Availability
StealthWatch System 5.7 will be generally available in December 2007. For more information, visit lancope.com/downloads/WhatsNewinStealthWatch57.pdf or contact Lancope at 888-419-1462 or sales@lancope.com.
About Lancope
Lancope(R), Inc. is the provider of the StealthWatch(TM) System, the most widely used network behavior analysis (NBA) and response solution that unifies behavior-based anomaly detection and network optimization capabilities to protect critical information assets and ensure network performance by preventing costly downtime, repair and loss of reputation. StealthWatch streamlines security and network operations into one process, reduces time and resources, and eliminates the costs and complexity associated with non- integrated point products. Both OPSEC and Common Criteria-certified, StealthWatch received the 2008 and 2007 Global Excellence Award in NBA and was named Best of Show at Interop2006. Defending the networks of Global 2000 organizations, academic institutions and government entities, StealthWatch protects hundreds of enterprise customers worldwide, more than all direct competitors combined. A contributing member of the Trusted Computing Group, Lancope also partners with fellow best-of-breed solution providers through its Technology Alliance Program, which includes Cisco Systems, Foundry Networks, IBM Tivoli, Check Point, TippingPoint, ArcSight and A10 Networks. Lancope is a privately held, venture-backed company headquartered in Atlanta, Georgia. For more information, call 888-419-1462 or visit www.lancope.com.
Lancope is a registered trademark and StealthWatch(TM) is a trademark of Lancope, Inc. All other registered or unregistered trademarks are the sole property of their respective owners.
Available Topic Expert(s): For information on the listed expert(s), click appropriate link. Adam Powers profnet.prnewswire.com/Subscriber/ExpertProfile.aspx?ei=63045 Jason Anderson http://profnet.prnewswire.com/Subscriber/ExpertProfile.aspx?ei=63046
CONTACT: Jody Ma Kissling of Lancope, Inc., +1-770-225-6513, jma@lancope.com; or Michelle Schafer of Merritt Group, +1-703-390-1525, +1-703-403-6377 (c), schafer@merrittgrp.com
