Intrusion Detection and Prevention

Network-aware IDS & IPS with Anomaly Detection

Intrusion Prevention

NitroGuard IPS

The heart of NitroSecurity's IPS solution is the NitroGuard IPS, an appliance-based intrusion prevention system that integrates NitroSecurity's technological advantages into a powerful, scalable, and cost-effective IPS device.

Key features of NitroGuard include:

• Plug-and-play deployment
• IDS and IPS functions operate simultaneously
• Threat identification and remediation
• Integrated Signature, Flow and Anomaly Detection
• Large, customizeable signature library
• Network Anomaly Detection based on Real-time Flow Monitoring
• Stealth Management Mode
• Bypass capabilities for reliability

NitroView Enterprise Security Manager

NitroView enhances the capabilities of NitroGuard through the collection and normalization of additional network, flow, event and log data — from NitroGuard devices as well as firewalls, switches, routers, servers and hosts — and the real-time analysis and correlation of that data.

NitroView uses Dynamic Security Intelligence (DSI) to instantly apply historical and situational context to security incidents, through the correlation and analysis of multiple data sources.

• Multi-vendor security management
• Correlates IDS and IPS data with flows, firewall, host, server, router, and other data feeds
• Performs Real-time analytics for detection of slow attacks and anomalies
• Responsive, intuitive GUI for easy security management
• Network Anomaly Detection based on Real-time Flow Monitoring
• Reporting of all IDS, IPS and other security information

Compliance Solutions

Compliance challenges

The breadth and depth of the various regulations spans many departmental boundaries and introduces many technological and operational challenges. They include:

• The necessity to manage large amounts of data, including systems availability, access and authentication, system attacks, etc.
• Intrusion Detection and Intrusion Prevention systems requirements, as well as network traffic to capture and correlate network and event data sources.
• The necessity to obtain, analyze, and correlate this data in a responsive and efficient manner: both for real-time system monitoring, and for historical analysis for the generation of audit trails.

Solving compliance needs with NitroSecurity

Leveraging NitroSecurity's technology, it is finally possible to manage the large amounts of data necessary to achieve sustainable compliance processes and controls. NitroView Enterprise Security Manager (ESM) has the ability to correlate data from various information sources - and produce actionable intelligence from that data - providing the foundation upon which a cost-effective, sustainable program may be built. Examining specific areas of regulatory compliance (the PCI, FISMA, HIPAA, and Sarbanes-Oxley standards) and what an enterprise must do to meet those requirements clearly illustrates how NitroSecurity's capabilities to facilitate meeting the stringent demands of regulatory compliance.

USM — Unified Security Management (see whitepaper)

Real-time analytics and data visualization that goes beyond SIEM

NitroSecurity goes Beyond SIM by providing a real-time operational and diagnostics tool, allowing you to collect, analyze, visualize and control all of your security information

NitroView ESM focuses on those aspects of SIM that you need most: such as responsive log management and reporting, real-time and forensic security event management, and anomaly-aware network behavior analysis — all in a single solution with a fully dynamic and interactive interface.

Real-time collecton, correlation, analysis, and reporting —

For a free 30 day evaluation please click here or call Smart Quote sales at 866-786-8350 ext. 1