First sFlow-based Network Behavior Analysis Solution Enhances Threat Mitigation for Network Management Solution

Lancope and Foundry Networks announced they will jointly demonstrate Closed Loop Threat Mitigation through integration of StealthWatch and IronView Network Manager (INM) in Foundry’s booth #1425 at Interop Las Vegas in the Mandalay Bay Convention Center, May 20 – 25, 2007. Delivering more precise threat mitigation capabilities, StealthWatch provides a powerful flow-based anomaly detection component to INM’s ability to configure, secure, and scale Foundry’s wired, wireless, and application traffic management solutions.

By integrating network behavior analysis with network management, Lancope is extending interoperability and collaboration with Foundry security solutions to provide an effective response element with additional mitigation capabilities to joint customers. INM leverages sFlow® traffic monitoring, embedded in Foundry’s switches and routers, and open source, signature-based security applications and tools to deliver highly scalable security and threat mitigation without the cost of ancillary security sensors. Foundry completes the Intrusion Defense component by adding StealthWatch for network behavior analysis. Also utilizing sFlow, StealthWatch baselines network activity and detects anomalies, which may be indicative of malware. INM accepts StealthWatch events, and based on configured security policies, can take remedial action to quickly stop “Zero-Day” threats. INM remediation efforts include finding the attackers switch port and setting a security policy to prevent further malicious or accidental activity.

“Lancope and Foundry are a powerful combination, as proven by the increasing number of StealthWatch deployments that successfully leverage sFlow for optimizing security and network operations,” said Harland LaVigne, president and chief executive officer for Lancope. “This integration provides joint customers with a powerful solution for addressing a multitude of network operations and security challenges. StealthWatch provides a detailed view of how users, applications, hosts and devices behave on enterprise network. This visibility enables more precise threat mitigation capabilities via Foundry INM than ever before.”