Corporate Home Page Division Home Employment Contact CSI About CSI

INTRUSION
MANAGEMENT

ActiveScout
Intelligent Intrusion Prevention™

Management Console
High performance data management and threat response

Network Sensors
State-of-the-art network monitoring

Real-time Network Awareness
Proactive passive network discovery and analysis

   PRODUCT VENDORS

• AlgoSec
• Barracuda
• Check Point
• Cisco
• Fluke
• ForeScout
• Postini
• Sourcefire
• VMware
• Websense


Sourcefire Real-time Network Awareness™

Sourcefire Real-time Network Awareness™ (RNA) enables organizations to more confidently protect their networks through a unique patent pending combination of passive network discovery, behavioral profiling, and integrated vulnerability analysis to deliver the benefits of real-time network profiling and change management without the drawbacks of traditional approaches to identifying network assets and vulnerabilities.

RNA’s innovative passive sensing technology constantly monitors all network assets (servers, routers, PC’s, firewalls, wireless access points, etc.) and provides a persistent view of:

  • Network Asset Profiles (MAC address, OS and version, services and versions, ports, etc.)
  • Asset Behavioral Profiles (traffic flow, traffic type, traffic volume, etc.) (release 2)
  • Network Profiles (hop count, TTL parameters, MTU parameters, etc.)
  • Security Vulnerabilities
  • Change Events (new assets, changed assets, behaviorally anomalous assets, etc.)
By providing real-time visibility into the status of the network and its assets, Sourcefire RNA adds a layer of intelligence to network monitoring that has never been seen before within the network security industry. RNA provides organizations the context necessary to manage all of their network solutions more efficiently, especially security. Administrators can use this revolutionary system to assess network health, update and enforce policies, monitor and manage vulnerabilities, and effectively prioritize their responses to security threats.

Key benefits:

  • Change Monitoring/Management: Sourcefire RNA persistently monitors networks and provides notifications on any observed changes including the introduction of new network assets or services, new behaviors, anomalous traffic patterns and policy violations.

  • Vulnerability Identification: Sourcefire RNA automatically associates changes in network assets with potential vulnerabilities and exploits that may target those vulnerabilities.

  • Meaningful Correlation: The Sourcefire Management Console tightly integrates RNA events about change on the network, Network Sensor events relating to intrusion attempts, and current vulnerability information to determine why change may have occurred and whether or not an attack poses a real threat.

  • Automated Security Optimization: Unless administrators know the systems being monitored by an IDS, deployed policies will inevitably produce either false positives or false negatives. With Sourcefire RNA, it is possible to precisely determine the network profile and actively optimize system configuration to eliminate both inherent false positives and false negatives.









Call (407) 598-1860 or email support@csisoft.com to get technical support for CSI products