Netronome Systems Improves Enterprise Security by Inspecting Encrypted Communications at Industry-Leading Performance
LONDON--Netronome Systems, a leading supplier of intelligent and high-performance network flow processing, deep packet inspection and application acceleration solutions, today announced the availability of the industry's highest-performance transparent Secure Sockets Layer (SSL) proxy. The Netronome SSL Inspector(TM) appliance provides existing network and security devices with access to the plaintext of SSL-encrypted communications. This ensures that threats, such as spam, spyware and viruses, data theft and other forms of cyber crime, are identified when transmitted inside of encrypted SSL flows that previously could not be examined by network and security appliances.
SSL-encrypted communications enable a variety of secure online transactions, and SSL-encrypted traffic has steadily grown to constitute a significant percentage of data transmitted to, from and within the enterprise. At the same time, accidental and intentional network-based security threats have become commonplace. To combat these threats, network security appliances, such as intrusion detection and prevention systems (IDS, IPS), compliance monitoring systems and network access control (NAC) devices, have become standard issue in the enterprise data center. In most instances, though, these sophisticated security devices are blind to the contents of SSL-encrypted communications, leaving a gaping hole in enterprise security architectures.
Numerous government regulations exist for personal privacy and corporate compliance, driving encryption requirements for electronic communications, as well as justifying the need to examine them. The Netronome solution accounts for these conflicting requirements and provides a sophisticated approach for positive and negative policy enforcement.
The Netronome SSL Inspector Appliance was purpose-built to satisfy the primary requirements for enterprise network and security administrators, including:
* PERFORMANCE: Netronome's SSL Inspector provides up to 4 Gbps of line-rate network throughput for 1,000,000 total flows with less than 10 microseconds of delay. The system supports 50,000 concurrent SSL flow states, 2,500 new SSL flow setups and teardowns, and 50,000 total non-SSL connection setups and teardowns per second. The system also offers support for 20,000 access control lists (ACLs) for policy control through the device.
* INTELLIGENCE: The appliance can log session details from 10,000,000 individual SSL flows, allowing network administrators to view the details of SSL communications. The SSL Session Log contains data from the certificate fingerprint for flows that are being actively inspected and decrypted, as well as those that are not.
* EASE OF USE: The SSL Inspector appliance offers seamless integration with existing network designs and security appliances. In addition, the SSL Inspector is unique to the industry by being the first transparent SSL proxy that both increases security and significantly minimizes deployment expenses by removing costly and complex user configuration and network integration.
* SECURITY BREADTH: The SSL Inspector Appliance supports a comprehensive list of encryption methods (TLS 1.0, TLS 1.1, SSL3 and partial SSL2), public key algorithms (RSA, DSA, DH), symmetric key algorithms (AES, 3DES, DES, RC4), hashing algorithms (MD5, SHA-1) and key sizes (512, 1024, 2048).
* LOWEST COST: The SSL Inspector appliance provides the highest performance available, along with the lowest operational cost and complexity - at a fraction of the price of current industry solutions.
"Increasing amounts of SSL-encrypted data, to, from and within the enterprise are creating blind spots for networked security appliances, and existing solutions have imposed substantial cost, performance and operational penalties," said Jarrod Siket, senior vice president of sales and marketing at Netronome Systems. "Our appliance allows enterprises to meet their security and compliance requirements without being forced to accept tradeoffs between performance, visibility and control."
The Netronome SSL Inspector appliance is available now for sale to system integrators, OEMs, retail channels and directly to large enterprises. It complements Netronome's SSL Inspector portfolio of products that are also available for integration as a software-only version of the application, or as a development kit coupled with the Netronome Flow Engine acceleration cards. For more information on these additional products, visit www.netronome.com.
Netronome's SSL Inspector appliance will be demonstrated at RSA Europe 2007 in London, taking place October 22-24, 2007 in Stand #32.
About Netronome Systems
Founded in August 2003, Netronome is a privately held corporation. Headquartered in Pittsburgh, Pennsylvania, with North American offices in Santa Clara, California and Boston, Massachusetts, Netronome has international operations in Centurion, South Africa; Cambridge, United Kingdom; Shenzhen and Hong Kong, China; and Penang, Malaysia. To learn more about the company and its products, please visit www.netronome.com or call +1 877 NETRO A-Z (+1 877 638 7629).
Contacts
Netronome Systems
Jarrod J.S. Siket, 724-778-3290
Sr. Vice President, Sales & Marketing
jarrod.siket@netronome.com
or
Mindshare PR for Netronome Systems
Heather Fitzsimmons, 650-947-7400
heather@mindsharepr.com
SSL-encrypted communications enable a variety of secure online transactions, and SSL-encrypted traffic has steadily grown to constitute a significant percentage of data transmitted to, from and within the enterprise. At the same time, accidental and intentional network-based security threats have become commonplace. To combat these threats, network security appliances, such as intrusion detection and prevention systems (IDS, IPS), compliance monitoring systems and network access control (NAC) devices, have become standard issue in the enterprise data center. In most instances, though, these sophisticated security devices are blind to the contents of SSL-encrypted communications, leaving a gaping hole in enterprise security architectures.
Numerous government regulations exist for personal privacy and corporate compliance, driving encryption requirements for electronic communications, as well as justifying the need to examine them. The Netronome solution accounts for these conflicting requirements and provides a sophisticated approach for positive and negative policy enforcement.
The Netronome SSL Inspector Appliance was purpose-built to satisfy the primary requirements for enterprise network and security administrators, including:
* PERFORMANCE: Netronome's SSL Inspector provides up to 4 Gbps of line-rate network throughput for 1,000,000 total flows with less than 10 microseconds of delay. The system supports 50,000 concurrent SSL flow states, 2,500 new SSL flow setups and teardowns, and 50,000 total non-SSL connection setups and teardowns per second. The system also offers support for 20,000 access control lists (ACLs) for policy control through the device.
* INTELLIGENCE: The appliance can log session details from 10,000,000 individual SSL flows, allowing network administrators to view the details of SSL communications. The SSL Session Log contains data from the certificate fingerprint for flows that are being actively inspected and decrypted, as well as those that are not.
* EASE OF USE: The SSL Inspector appliance offers seamless integration with existing network designs and security appliances. In addition, the SSL Inspector is unique to the industry by being the first transparent SSL proxy that both increases security and significantly minimizes deployment expenses by removing costly and complex user configuration and network integration.
* SECURITY BREADTH: The SSL Inspector Appliance supports a comprehensive list of encryption methods (TLS 1.0, TLS 1.1, SSL3 and partial SSL2), public key algorithms (RSA, DSA, DH), symmetric key algorithms (AES, 3DES, DES, RC4), hashing algorithms (MD5, SHA-1) and key sizes (512, 1024, 2048).
* LOWEST COST: The SSL Inspector appliance provides the highest performance available, along with the lowest operational cost and complexity - at a fraction of the price of current industry solutions.
"Increasing amounts of SSL-encrypted data, to, from and within the enterprise are creating blind spots for networked security appliances, and existing solutions have imposed substantial cost, performance and operational penalties," said Jarrod Siket, senior vice president of sales and marketing at Netronome Systems. "Our appliance allows enterprises to meet their security and compliance requirements without being forced to accept tradeoffs between performance, visibility and control."
The Netronome SSL Inspector appliance is available now for sale to system integrators, OEMs, retail channels and directly to large enterprises. It complements Netronome's SSL Inspector portfolio of products that are also available for integration as a software-only version of the application, or as a development kit coupled with the Netronome Flow Engine acceleration cards. For more information on these additional products, visit www.netronome.com.
Netronome's SSL Inspector appliance will be demonstrated at RSA Europe 2007 in London, taking place October 22-24, 2007 in Stand #32.
About Netronome Systems
Founded in August 2003, Netronome is a privately held corporation. Headquartered in Pittsburgh, Pennsylvania, with North American offices in Santa Clara, California and Boston, Massachusetts, Netronome has international operations in Centurion, South Africa; Cambridge, United Kingdom; Shenzhen and Hong Kong, China; and Penang, Malaysia. To learn more about the company and its products, please visit www.netronome.com or call +1 877 NETRO A-Z (+1 877 638 7629).
Contacts
Netronome Systems
Jarrod J.S. Siket, 724-778-3290
Sr. Vice President, Sales & Marketing
jarrod.siket@netronome.com
or
Mindshare PR for Netronome Systems
Heather Fitzsimmons, 650-947-7400
heather@mindsharepr.com
Legal Disclaimer:
EIN Presswire provides this news content "as is" without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.