University of Adelaide Gains Nearly 100 Percent Network Visibility with Lancope's StealthWatch System for NetFlow-Based Network Behavior Analysis


Complete Visibility from StealthWatch Improves Network Availability and Security

ATLANTA, Feb. 25 -- Lancope®, Inc., the provider of the StealthWatch(TM) System, the most widely used network behavior analysis (NBA) and response solution, today announced that the University of Adelaide is using StealthWatch to gain 100 percent insight into routed network traffic in order to identify anomalies such as worms and interface congestion.

The University network is comprised of approximately 1,000 infrastructure devices with nearly 10,000 hosts active on the network at any given time. The StealthWatch System analyzes NetFlow traffic information from the University's 25 Cisco routers to provide a detailed view of activity. With StealthWatch, the University is able to quickly and easily investigate potential issues related to security, network operations and applications.

"A NetFlow analysis tool of some sort is a 'must have' for any network and security operations team, and StealthWatch is the product to consider if you demand the best technology available," said Lindsay Whitbread, network operation and information security team leader for the University of Adelaide. "Like using a mobile phone, once you've seen StealthWatch in action, you'll wonder how you possibly lived without it."

Currently, the University is relying on StealthWatch in the following capacities:

o Information Security - The University's information security
specialists use StealthWatch to detect network traffic anomalies and/or
intrusion attempts. StealthWatch has enabled security staff to block
hosts scanning the University network for vulnerabilities-preventing
security breaches before damage can occur.

o Network Operations - Through NetFlow collection and SNMP polling,
StealthWatch provides a single view of every network port on critical
devices. The University's network operations staff can detect interface
congestion immediately and easily investigate the root causes behind
network events.

o Application Administration - StealthWatch helps the University's
application administrators quickly investigate the network connections
associated with a server, which is performing unexpectedly. Via
StealthWatch, administrators use NetFlow data to fully understand the
network behavior of a server before, during and after an incident.

"Before StealthWatch, we invested significant time and resources developing scripts to create NetFlow reports and to identify important network events," said Whitbread. "Only one staff member could drive the system, which often meant missing important network incidents until some time after an event occurred. With StealthWatch in place, several people can effectively analyze NetFlow information in real time without requiring specialized training."

The University imports Cisco PIX firewall logs into the StealthWatch Management Console to give operations staff additional network behavior data. It also uses the StealthWatch IDentity-1000 (ID-1000) appliance to associate users with corresponding IP addresses to help network operations staff quickly identify individuals responsible for suspect network activity.

"StealthWatch has dramatically increased our network visibility," said Whitbread. "We've gone from analyzing 10 percent of network connections to 95 percent or higher. Tasks which we used to avoid because of the effort required, are now performed quickly and efficiently using StealthWatch."

User interface was a key consideration in the University's search for an NBA solution. "The tabbed layout in the StealthWatch GUI gives us an intuitive way to run several reports in parallel, so we can quickly and easily verify all aspects of a network incident, including the behavior of key hosts, historical incidents of a similar nature and other trends," said Whitbread. "The StealthWatch GUI will always be a clear advantage over the competition."

"The University of Adelaide already recognized the value of NetFlow data for improving security, network and application performance," said David Schwickerath, VP International Field Operations for Lancope. "As a sophisticated user, the University has harnessed the power of the StealthWatch System to achieve real bottom-line benefits like decreased user downtime, better data security and greater IT staff efficiency."

About Lancope

Lancope®, Inc. is the provider of the StealthWatch(TM) System, the most widely used network behavior analysis (NBA) and response solution that unifies behavior-based anomaly detection and network optimization capabilities to protect critical information assets and ensure network performance by preventing costly downtime, repair and loss of reputation. StealthWatch streamlines security and network operations into one process, reduces time and resources, and eliminates the costs and complexity associated with non- integrated point products. Both OPSEC and Common Criteria-certified, StealthWatch received the 2008 and 2007 Global Excellence Award in NBA and was named Best of Show at Interop2006.

Defending the networks of Global 2000 organizations, academic institutions and government entities, StealthWatch protects hundreds of enterprise customers worldwide, more than all direct competitors combined. A contributing member of the Trusted Computing Group, Lancope also partners with fellow best- of-breed solution providers through its Technology Alliance Program, which includes Cisco Systems, Foundry Networks, IBM Tivoli, Check Point, TippingPoint, ArcSight and A10 Networks. Lancope is a privately held, venture-backed company headquartered in Atlanta, Georgia. For more information, call 888-419-1462 or visit www.lancope.com.

Source: Lancope, Inc.

CONTACT:
Jody Ma Kissling of Lancope, Inc.
+1-770-225-6513
jma@lancope.com

or

Michelle Schafer of Merritt Group for Lancope
+1-703-390-1525
+1-703-403-6377(cell)
schafer@merrittgrp.com

Web site: www.lancope.com/

All Topics