You are here: News >> IT Security News >> Defend Against SSL Tunnel Hacks with StoneGate IPS-1030
| » IT Security NEWS |
| |
| » 07 July 2009 |
| Defend Against SSL Tunnel Hacks with StoneGate IPS-1030 |
Stonesoft's StoneGate IPS-1030 is an innovative new appliance with a one-of-a-kind ability of analyzing the inside of an SSL tunnel in order to inspect if its encrypted web traffic is rife with malicious code or not. This new product actually improves the company's end-to-end network security by defending servers, hosts, internal networks, and individual workstations from cyber attacks and hacks concealed within the SSL tunnel.
Normally, most businesses depend on perimeter security enforcement, which usually ignores the possibility of using encrypted web traffic to bypass such traditional security measures. Fortunately, the StoneGate IPS-1030 was specifically designed to resolve this new dilemma. This newest Stonesoft tool eliminates this new weakness in network defense by submitting the encrypted traffic for examination as clear-text HTTP data and offering a controlled method of inspecting encryption channels within the network.
Moreover, the product also offers high-level monitoring that's needed in order to meet the lofty requirements of the latest PCI DSS (Payment Card Industry Data Security Standards). More to the point, the StoneGate IPS probably exceeds the stipulations set by the PCI DSS by improving upon the old standards of security and addressing recent developments in hacking technology.
Simply put, traffic inspection within the SSL level assists companies in implementing the aforementioned end-to-end controls ordered by the PCI DSS while setting a new bar in network protection at the same time. Following PCI regulation is needed in order to avoid major data thefts despite the escalating capabilities of cyber terrorists worldwide.
The StoneGate IPS uses highly developed and sophisticated solid-state disk technologies that underscore toughness and dependability above all else. In addition, this appliance uses half the usual power needed to run other comparable products. It also whitelists domains in order to, for example, exclude private online banking services from inspection and decryption. This service can be utilized for remote sites that are required for exclusion by legislation or those that are trusted or well-known.
Further services integrated into the IPS-1030 include transparent layer-2 firewall features, patented high-availability advancements, and the latest technology available for false positive removal. Also, it's only natural for hardware that's alleged to be the ideal network solution for Managed Security Service Providers (MSSPs) and branch offices to have 6 x gigabytes per second Ethernet network interfaces and up to 200 megabytes per second throughput.
|
|