Barracuda voted 2009 best Web Application Firewall

The Barracuda Web Application Firewall was selected by the readers of Information Security Magazine as the best Web Application Firewall, beating Citrix and F5!

Information Security:
2009 Reader’s Choice Awards – September 2009:

Click here for the full article

GOLD:  Barracuda Web Application Firewall, Barracuda Networks

If application developers don’t employ secure coding practices, a Web application firewall can help pick up some of the slack, protecting against unseen flaws that attackers can exploit with SQL injection attacks, cross-site scripting or worse. In fact, that’s why readers gave the Barracuda Web Application Firewall top honors this year, citing the device’s particular effectiveness in detecting and reporting known attacks and vulnerabilities.  Ease of installation also scored high with readers.

For more information on how you can protect and secure your Web applications from threats,  please contact Trans Niaga sales representative at info@transniaga.com

Trans Niaga is a 100% IT Security focused company specializing in distribution, on-site POC (Proof of Concept) implementation, installation & best practice configuration, after-sales technical support & certified training, compliance consultancy and managed services for best-of-breed security solutions, with headquarters in Malaysia and offices in Asia Pacific (Thailand, Brunei, Singapore, Hong Kong & China).

12 Ways UTMs are Improving Security and Reducing Costs

In today’s economy, businesses and their IT organizations need to do more with less. Leading enterprises are already reaping benefits through IT consolidation, by centralizing data centers and embracing virtualization initiatives. Now, organizations of all sizes have the opportunity to optimize productivity and minimize total cost of ownership by consolidating multiple security technologies in a single Unified Threat Management s (UTM) solution.

In fact, research* shows that companies deploying unified solutions see on average over twelve months reduced total cost of ownership stemming from:

• 20% reduction in actual threat related incidents
• 14% reduction in audit deficiencies
• 11% reduction in unscheduled downtime
• 5% reduction in associated staff

Read the white paper to discover the 12 major ways UTMs are driving Security Consolidation.
Download this white paper to learn how a UTM solution can:

·          Improve Security effectiveness and stabilize your systems.

·          Increase greater productivity by reducing complexity.

·          Lower management, support and deployment costs.

·          Reduce your total cost of ownership.

Sourcefire’s Bundle of Joy Promotion

SourceFire Defense Center / RNA Bundle Promotion

From July 1, 2009 through December 31, 2009, Trans Niaga is offering a special promotion to SourceFire customers. Customers that purchase new Defense Center appliances during this promotional period will receive a fixed quantity of free RNA host licenses, as described in the table below:

Awarded by SC Magazine as 2009’s Best IDS/IPS Solution for Snort and recognized as “Leader” in Gartner’s 2009 Magic Quadrant for Network Intrusion Prevention System Appliances, Sourcefire IPS (or 3D Sensors) uses a powerful combination of vulnerability- and anomaly-based inspection methods—at throughputs and line speeds up to 10 Gbps—to analyze network traffic and prevent critical threats from affecting the network.

SourceFire IPS - 3D Sensors

Whether deployed at the perimeter, in the DMZ, in the core, or at critical network segments, and whether placed in inline or passive mode, Sourcefire’s easy-to-use IPS appliances provide comprehensive threat protection. Sourcefire IPS excels with extensive analytics, powerful reporting, and unrivaled scalability.

All intrusion events can be sent securely from Sourcefire IPS to the Defense Center (DC) for centralized storage and analysis. Each DC correlates attacks with real-time network and vulnerability intelligence to assign an “Impact Flag” rating denoting the impact of the attack. This enables IT security to dramatically reduce false positives by up to 99%, saving considerable time and effort.

Defense Center also provides fully customizable reports and alerts. Users can choose from a variety of pre-defined report templates or create custom reports to meet their reporting needs. Reports can be generated in PDF, HTML, and CSV formats, while alerts can be sent via syslog, SNMP, and email.

With Defense Center, users have complete control over policies and configuration of up to 100 SourceFire devices from a single management console.

For large enterprises or organizations with distributed IT personnel, a single DC3000 appliance can be configured in Master Defense Center (MDC) mode to manage up to 10 subordinate DCs, effectively allowing the management of hundreds of 3D Sensors from a single management console. Sourcefire is the only IPS vendor to offer this powerful management capability.

Typical Layout of SourceFire IPS & DC Deployment

By leveraging Sourcefire RNA (Real-time Network Awareness), users can take their Sourcefire IPS to an even higher level. It provides 24×7, passive network monitoring, storing a real-time inventory of operating systems, services, applications, protocols, and potential vulnerabilities that exist on the network. RNA’s key differentiator lies in its ability to collect this intelligence in a completely passive manner, while seamlessly integrating the intelligence with the 3D System. Because RNA is passive, it avoids the numerous and substantial pitfalls of traditional network monitoring technologies that rely on active scanning or host-based agents. Although passive discovery is RNA’s primary means of gathering network intelligence, RNA’s host database can be augmented with information gathered by active discovery tools.

Once RNA has established a baseline network inventory, its powerful Policy and Response (P&R) engine can notify Information Security or Network Operations the moment a new host appears on the network and/or when an existing host has changed its approved configuration (e.g., OS upgrade, new service).

Spec. Sheet summarizing the performance and specifications of various Sourcefire 3D Sensor IPS and Defense Center models are readily downloadable from SourceFire website here. These complete IDS / IPS total solutions are currently available from regional distributor – Trans Niaga.

Trans Niaga is a 100% IT Security focused company specializing in distribution, on-site POC (Proof of Concept) implementation, installation & best practice configuration, after-sales technical support & loan services, certified training, compliance consultancy and managed services for best-of-breed security solutions, with headquarters in Malaysia and offices in Asia Pacific (Thailand, Brunei, Singapore, Hong Kong & China)

Introducing the NEW SonicWALL TZ 100 and TZ 200 Firewalls

The Purpose-Built Firewall for SMBs

Recently positioned as “Leaders” in the Gartner’s Magic Quadrant for SMB Multifunction Firewalls, SonicWALL has just unveiled two new enhanced models from its popular SonicWALL TZ Series – the TZ 100 and TZ 200.

The SonicWALL TZ Series provides the perfect solution for those who require utmost performance incorporating the latest technologies, enterprise-class functionality, and minimized complexity and total cost of ownership. Available in standard and Wireless-N configurations, you are assured of keeping ahead of rapid advancements in Web 2.0, increasing bandwidth capability and emerging threats.

These two new enhanced TZ models are definite high performance network protection appliances that are created for small-to-midsize businesses (SMBs) which always choose the best for their invaluable network system. The TZ Series also continues SonicWALL’s commitment to provide Unified Threat Management (UTM) protection with the inclusion of the Comprehensive Anti-Spam Service to its arsenal of Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall, Enforced Client Anti-Virus, and Content Filtering Services. With just a single click to activate, this service helps save bandwidth by blocking spam, phishing and virus-laden emails. Besides that, junk emails are rejected at the gateway before they enter into the network, based on Sender IP reputation and additional characteristics.

While hauling your notebook around with you while on the go is typical for a business professional, the new TZ Series provides secure access to remote or mobile devices over SSL VPN, as well as secure site-to-site connections over IPSec VPN by integrating Clean VPN. The number of nodes supported is unrestricted. In addition, the revolutionary TZ 100 and TZ 200 also provide Clean Wireless that optimizes wireless performance, combining UTM with high-speed 802.11n wireless in the firewall that is extendable by adding 802.11a/b/g/n SonicPoints. This contributes to better encryption of the traffic while also ensuring the integrity of all traffic passing through. Furthermore, the TZ Series offers an option for 3G and analog modem connectivity for use as the primary or failover connection. This allows guarantee Internet connection by automatically establishing secondary connection whenever failure of the primary connection is detected.

SonicWALL has focused on offering the best ways of protecting the network ever since its introduction. With the ultra-performing security processor architecture which contributes to the increased TZ Series performance of up to five-fold, in addition to the utilization of SonicWALL’s Reassembly-Free Deep Packet Inspection, the all new TZ Series boosts throughput and real-time inspection providing much greater performance than the competition for the same dollar.

Market list price for TZ 100, TZ 200 with 1 year CGSS* (Comprehensive Gateway Security Suite) subscription services are MYR 2,010 and MYR 3,350** respectively.

Datasheet summarizing the performance and specifications of TZ 100 and TZ 200 are readily downloadable from SonicWALL website here. These 2 great models are currently available from regional distributor – Trans Niaga Sdn Bhd @ +603 – 2264 3000 / info@transniaga.com.

Trans Niaga is a 100% IT Security focused company specializing in distribution, on-site POC (Proof of Concept) implementation, installation & best practice configuration, after-sales technical support & loan services, certified training, compliance consultancy and managed services for best-of-breed security solutions, with headquarters in Malaysia and offices in Asia Pacific (Thailand, Brunei, Singapore, Hong Kong & China).

* CGSS subscription includes – Gateway anti-virus, Anti-spyware, Intrusion Prevention Services, Content Filtering Premium Service, ViewPoint reporting, Hardware Warranty and 24×7 SonicWALL Support.

** Prices are MSRP and are correct at time of publish

Product Bulletin: Aventail Firmware Version 10.0.2 Maintenance Release Now Available

Affected Products: SonicWALL Aventail EX SSL-VPN 750, 1500, 1600, 2500, 6000 and 7000 appliances

Affected Firmware Versions: All Versions of 10.0.x prior to 10.0.2

SonicWALL would like to inform customers currently running firmware version 10.0.x that the 10.0.2 firmware version has been released. This is a maintenance release containing several fixes for SonicWALL Aventail SSL VPN appliances and updates for the Advanced EPC (End Point Control) feature. It is worth noting that with the 10.0.2 maintenance release the Internet Explorer 8 (IE8) browser is now supported for accessing the WorkPlace portal.

Release Details: Additional details can be obtained in the release notes: click here.

Firmware Availability: The 10.0.2 firmware for SonicWALL Aventail EX SSL-VPN 750, 1500, 1600, 2500, 6000 and 7000 appliances is now available to all customers with a valid support contract. Please visit www.mysonicwall.com to obtain a copy.

Barracuda Networks Warns Against Rogue Antivirus

New Capabilities of Tripwire Enterprise 7.5V

The latest release of Tripwire Enterprise, version 7.5V, significantly extends Tripwire’s ability to provide configuration control of virtual and physical IT configurations within a single software solution.

Tripwire Enterprise 7.5V adds a whole new level of visibility, security and compliance to virtual environments by continuously monitoring ESX hypervisors, VM containers and Virtual Switches and ensuring they meet policy requirements as described by CIS, PCI, DISA STIG and VMware Hardening guidelines. In addition, Tripwire Enterprise now integrates with VMware Virtual Center, which enables the auto-discovery, tracking, alerting and reporting of changes among virtual objects, using the same group hierarchy structure as described within Virtual Center.

Tripwire Enterprise 7.5V also provides a number of usability enhancements, including an updated user interface, new customizable home pages, new policy templates and two new reports.

In addition, Tripwire Enterprise 7.5V allows integration with Microsoft’s System Center Operations Manager through a free management pack. With the management pack, Operations Manager users are not only assured that their configurations maintain ongoing policy compliance, but can also receive remediation information right within their primary console if any configurations step out of bounds. More details.

Intelligent Service Optimization Solutions for Enterprise Network Management

To ensure that a business’s mission-critical applications run smoothly at all times without interference, network managers must have a clear view of all application traffic running on the Internet, the Wide Area Network (WAN) and the data center. Allot solutions grant enterprise network managers a clear and precise depiction of how their bandwidth is being utilized in real-time and over time. Using Allot solutions, network managers are able to optimize network performance by guaranteeing bandwidth for critical application traffic and wan optimization, limiting the capacity of ‘nice-to-have’ applications and even removing non-business applications completely if required. To complete the package, Allot provides long-term reporting options on the use of the Internet and WAN applications – vital for capacity planning and trend analysis.

Allot’s comprehensive portfolio of products is based on cutting-edge Layer-7 Deep Packet Inspection (DPI) technology, which looks deep into every packet flow to identify the application and to prioritize its delivery, ensuring Quality of Service and enabling application acceleration.

Allot solutions for enterprise networks include:

• Network Visibility solutions deliver the application awareness and network intelligence that is needed to understand how broadband resources are being consumed by users and applications across the entire network.  Providing both real-time and long-term monitoring and reporting, Allot solutions enable fast and efficient troubleshooting as well as informed capacity planning based on accurate usage statistics and trend analysis.
• Bandwidth Management solutions allow network managers to control costs and optimize network performance by efficiently managing the utilization of bandwidth resources dedicated to Internet links, data centers and WANs. As a result, the enterprise network becomes more supportive of your business.
• Wide Range of Solution Options: Enterprise networks may be facing application performance problems on the Internet links, within their data centers and on their WAN links. Allot’s broad portfolio of products scales to support from 100Mbps to 10Gbps throughput, allowing wan acceleration and centralized management of the entire network with customized traffic policies suited to the needs of each network link.

Barracuda Networks Launches New Enterprise-Class Barracuda Web Filter

Interop 2009, Las Vegas, May 19, 2009 – (Booth # 621) Barracuda Networks Inc., today announced the launch of the Barracuda Web Filter 1010 for large organizations, capable of handling up to 12,000 concurrent users in a single appliance.  Starting at $89,999 with no per user fees, the Barracuda Web Filter 1010 is the most affordable high-capacity Web filtering appliance on the market targeting enterprises and large organizations.

“One of the biggest challenges facing larger organizations today are shrinking IT budgets and an increase in security risks,” said Stephen Pao, vice president of product management for Barracuda Networks.  “The Barracuda Web Filter 1010 is our most powerful, fully integrated Web filtering solution to date, making it a perfect choice for high-end customers looking to meet growing security demands without the deployment complexity or per user fees associated with incumbent solutions.”

Like other Barracuda Web Filter models, the Barracuda Web Filter 1010 is an integrated appliance that provides integrated malware protection, content filtering, application policy control, and an embedded database and reporting engine.  A single Barracuda Web Filter 1010 can handle one gigabit per second (Gbps) throughput and features a Web cache size of one terabyte (TB). 

Able to manage policy for up to 15,000 TCP connections at one time, the Barracuda Web Filter 1010 has four network interfaces that can be used simultaneously in WCCP deployment or in two LAN/WAN pairs in an inline deployment.  Multiple Barracuda Web Filter 1010 models can be clustered for both scalability and redundancy.  Through the Barracuda Control Center, Barracuda Web Filter models of different sizes can be centrally managed, enabling enforcement of Internet policy across an entire distributed organization.

Pricing and Availability
The Barracuda Web Filter 1010 is immediately orderable in the United States and will begin shipping in June.  The Barracuda Web Filter 1010 is priced at $89,999 for the appliance and $24,299 per year for Energize Updates subscriptions that include content filter, application, antispyware, antivirus, and security definitions.  International pricing and availability varies based upon region.  For more information, please contact Barracuda Networks at 1-888-ANTI-SPAM or visit www.barracuda.com.

About the Barracuda Web Filter
Available in seven models, the Barracuda Web Filter combines preventative, reactive and proactive measures to form a complete content filtering and anti-spyware solution for businesses of all sizes.  The Barracuda Web Filter is designed to enforce acceptable Internet usage policies by blocking access to objectionable content and unauthorized Internet applications.   At the same time, the Barracuda Web Filter’s award-winning feature set enables the Barracuda Web Filter to block spyware downloads, prevent viruses, and stop access to spyware Web sites.  Unlike the widely available desktop software solutions, the Barracuda Web Filter is easily installed and does not require the additional time, money or resources necessary for downloading and maintaining software on each individual PC.  Hourly Energize Updates are made automatically by Barracuda Central so that the Barracuda Web Filter can block the ever-changing virus and spyware variants, as well as maintain the most up-to-date database of the latest productivity-inhibiting Web sites.

Lower the Cost of Network Security through SonicWALL® Global Management

Today’s organisations are striving to lower the Total Cost of Ownership (TCO) of their IT security investments while maintaining high levels of security, compliance and productivity. But in a period of shrinking IT budgets and staff reductions, how can organisations continue to drive costs down without compromising performance in these key areas?  

Centralized management and reporting has proven to be the most effective strategy that organizations have adopted in response to this “do more with less’ dilemma.

Consolidating your security and centrally managing multiple security appliances, you can effectively: 

• Increase your IT productivity,
• Lower Total Cost of Ownership (TCO),
• Become more compliant to industry laws and corporate standards,
• Leverage “Unified Threat Management” (UTM) approach, and
• Maintain the highest level of security possible.

LEARN MORE BY VIEWING THIS ARCHIVED WEB SEMINAR
at your convenience
Introducing: SonicWALL GMS 5.0 – Non-technical Seminar

Join this web seminar to learn more about the typical challenges of managing a distributed IT infrastructure and how the SonicWALL® Global Management System (GMS) can help you address these. We’ll review the benefits of GMS and provide you with a comprehensive solution overview. 

OR —

Watch the GMS Flash Video here.
Compare GMS Features and Functionality here.
Download the GMS Datasheet here.