SecureData, a member of the JSE-listed ERP.com Group, and the African distributor for TippingPoint Technologies, today announced that the latter will extend its award-winning UnityOne Intrusion Prevention Systems (IPS) to include advanced denial-of-service (DoS) protection, which will block a variety of DoS and distributed denial-of-service (DDoS) attacks including SYN floods, connection floods, packet floods, and difficult-to-detect attacks originating from spoofed and non-spoofed sources.
eNom, one of the largest accredited domain name registrars with over four million names, was protected recently by TippingPoint's new capabilities. "In our evaluation of the leading DoS products, TippingPoint's UnityOne has performed the best," commented Jim Beaver, vice-president of operations at eNom. "TippingPoint's UnityOne has already blocked several DoS attacks targeting our network."
TippingPoint's Advanced DoS Protection is made possible due to a state-of-the-art hybrid approach using a combination of anomaly filters, SYN proxy, rate shaping and statistical techniques. UnityOne's new features control the number of new connection requests and established connections to limit the total number of connections and connection rates (the number of new connections per second). This allows legitimate clients full access to protected resources while preventing attackers from flooding a server.
"TippingPoint is excited to help customers like eNom achieve total network security," added TippingPoint's Chief Technology Officer Marc Willebeek-LeMair. "The value proposition of intrusion prevention is clear given today's threat environment, and increases dramatically with the addition of advanced DoS protection. Only TippingPoint combines best-of-breed intrusion prevention with advanced DoS protection, VOIP protection and performance protection."
Another advanced DoS protection feature performs IP filtering to block attacks from malicious or spoofed IP addresses. It validates the legitimacy of the packet and source before allowing the connection request to proceed. Other DoS attacks can be caused when a request does not follow proper procedure. TippingPoint's existing security filters are able to block anomalous traffic that does not conform to normal traffic guidelines.
UnityOne's threshold filters monitor traffic patterns and automatically define 'normal' traffic based on studies of a network over a period of time. If traffic surges beyond a set percentage of normal traffic, UnityOne's existing anomaly protection automatically takes action according to policy.
"There is no doubt that DoS attacks are on the rise," added Gartner Research Vice-President Richard Stiennon. "Denial-of-service protection is a natural extension for intrusion prevention systems because they are in line and have the ability to deeply inspect and classify traffic, then take action accordingly."
TippingPoint expects advanced denial-of-service protection to be available as an optional feature on UnityOne intrusion prevention systems later this year. A limited release version for select UnityOne devices is already available.
TippingPoint's UnityOne provides application protection, performance protection and infrastructure protection at gigabit speeds through total packet inspection. Application protection capabilities provide fast, accurate, reliable protection from internal and external cyber attacks.
Through its infrastructure protection capabilities, UnityOne protects VOIP infrastructure, routers, switches, DNS and other critical infrastructure from targeted attacks and traffic anomalies. UnityOne performance protection capabilities enable customers to throttle non-mission-critical applications that hijack valuable bandwidth and IT resources, thereby aligning network resources and business-critical application performance.
For further information, please contact Dean Brazier at telephone +27 11 257 8600; fax +27 11 257 8699; e-mail deanb@sd.co.za.
Share
eNom, Inc is one of the largest ICANN accredited registrars with over four million names under its care. eNom specialises in domain name registration and related services including the world's largest real-time DNS service, white-label e-mail and hosting services and traffic monitoring, alerting and analysis. Recognised as the fastest-growing reseller-focused registrar, eNom's 10 000+ resellers depend on eNom's stable, scalable Internet infrastructure to handle hundreds of millions of requests every day.
TippingPoint Technologies
TippingPoint Technologies, based in Austin, Texas, USA, is the leading provider of network-based intrusion prevention systems that deliver in-depth protection and attach eradication for corporate enterprises, government agencies, service providers and academic institutions. Their innovative approach offers customers an effective network-based security solution with unrivalled economics, ultra-high performance, scalability and reliability.
SecureData
SecureData, an ERP.com company, is Africa's premier IT security solution provider. SecureData's solutions incorporate antivirus and content security, network security, intrusion detection software, and network asset management. SecureData's comprehensive "Managed Security Services" include design, audit, implementation, outsourcing and hosting.
ecureData distributes, sells and supports category leading IT security products to the public, corporate and SME sectors throughout Africa as well as products and services to the SOHO and consumer markets through partnerships with ISPs. As well as being the sole distributor in Sub-Saharan Africa for and Trend Micro, SecureData is the African distributor for US-based TippingPoint Technologies and the southern African distributor for US-based BorderWare, US-based RSA Security and UK-based Centennial. For more information, visit SecureData at www.sd.co.za.
ERP.com
ERP.com is a JSE-listed company focused on the implementation, integration and management of enterprise applications in an e-business environment. For more information, visit ERP.com at www.erpcom.co.za.
Editorial contacts