Securify Solutions for Identity-Based Discovery and Control
Securify offers appliances, called Securify Monitors, to track network access and behavior across systems and networks. The user identity and group / role associations are dynamically drawn from existing user directories. Monitored traffic can be viewed in 'Discovery mode' or in 'Verification' mode where traffic is automatically verified against role-based controls as well as pre-built security best practice templates. Prioritized violations with user identities and incident details are available via an intuitive web interface.
Securify Monitors capture data in three ways:
- Monitors utilize existing flow-based data (e.g. Cisco Netflow, Juniper JFlow) for analysis
- Monitors passively capture, decode and analyze traffic via native deep packet inspection (DPI) via port mirroring or passive network taps to obtain full packet data for protocol decode up to application layer 7.
- Multiple Monitors can be used in "Mixed mode" configuration that combines both flow-based data and deep packet inspection-based data.
Typically Securify monitors traffic into and out of critical data centers and across key trust boundaries such as extranets. Data capture and analysis is performed on a distributed basis in each Monitor.
For multi-Monitor deployments, information is consolidated using Securify Enterprise Manager. Enterprise Managers can handle 'mixed mode' data from both flow-based data sources as well as DPI-based data. Securify can also send automated, prioritized alerts to trouble ticket systems and incident response personnel when required. Automated enforcement via access control commands to existing network devices may also be activated when required.
Monitors are available for 100Mb, 400Mb and 1Gb link capacities.
Flow-based Monitors are available starting at 10,000 flows per second
Benefits:
- Network appliances provide easy, centralized deployment
- Passive monitoring with no network reconfiguration minimizes risk
- No dependency on server agents or logs minimizes IT effort
- Distributed analysis provides real-time results and enterprise scalability
Securify Management Appliances
Centralized Configuration, Monitoring and Reporting
Securify Enterprise Manager appliances centralize the control and monitoring of multiple Securify Monitors and security zones. A single integrated dashboard consolidates discovery and control across multiple Monitors. Role-based access to different monitors and/or security zones enables easy mapping to organizational responsibility.
The Securify Studio application provides a graphical interface for selecting pre-built control modules, configuring system parameters, customizing controls and performing detailed forensic analysis. Deployment of controls to multiple Monitors is managed centrally by the Enterprise Manager.
The Securify Enterprise Warehouse & Reporting appliance provides long term data warehousing and trend reporting. Trended reports on security incidents or compliance metrics can be accessed on up to a year's worth of stored data. Standard reports as well as custom reports via Crystal Designer meet both operational remediation as well as executive status report requirements.
Benefits:
- Multi-device management and data storage for enterprise scalability
- Graphical interfaces and step-by-step wizard for ease of use
- Long term data storage for trending and compliance
- Integrated database eliminates need for a DBA
Contact a Solution Expert
