Real-time Network Awareness- Computing System Innovations

		INTRUSION MANAGEMENT
		ActiveScout Intelligent Intrusion Prevention™ Management Console High performance data management and threat response Network Sensors State-of-the-art network monitoring Proventia Block malicious attacks in real-time. QualysGuard Enterprise Vulnerability management for large distributed organizations QualysGuard Express Vulnerability management for small to medium sized organizations or enterprise business units QualysGuard Intranet Scanner Appliance designed to assess network vulnerabilities inside the firwall Real-time Network Awareness Proactive passive network discovery and analysis RealSecure Desktop Analyzes application, network and virtual private network (VPN) behavior on desktops RealSecure Server Sensor Analyzes events, host logs, and inbound and outbound network activity on servers RealSecure® Network 10/100 Network intrusion detection response monitoring for 10/100 network segments RealSecure® Network Gigabit Network intrusion detection response monitoring for Gigabit network segments

	PRODUCT VENDORS
		• Aladdin • Check Point • Cisco • Citrix • Fluke • ForeScout • Intel • ISS • Microsoft • NetIQ • Nokia • Postini • Qualys • Sourcefire • Veritas • VMware • vpnMD • Websense • Zone Labs

Sourcefire Real-time Network Awareness™

Sourcefire Real-time Network Awareness™ (RNA) enables organizations to more confidently protect their networks through a unique patent pending combination of passive network discovery, behavioral profiling, and integrated vulnerability analysis to deliver the benefits of real-time network profiling and change management without the drawbacks of traditional approaches to identifying network assets and vulnerabilities.

RNA’s innovative passive sensing technology constantly monitors all network assets (servers, routers, PC’s, firewalls, wireless access points, etc.) and provides a persistent view of:

Network Asset Profiles (MAC address, OS and version, services and versions, ports, etc.)
Asset Behavioral Profiles (traffic flow, traffic type, traffic volume, etc.) (release 2)
Network Profiles (hop count, TTL parameters, MTU parameters, etc.)
Security Vulnerabilities
Change Events (new assets, changed assets, behaviorally anomalous assets, etc.)

By providing real-time visibility into the status of the network and its assets, Sourcefire RNA adds a layer of intelligence to network monitoring that has never been seen before within the network security industry. RNA provides organizations the context necessary to manage all of their network solutions more efficiently, especially security. Administrators can use this revolutionary system to assess network health, update and enforce policies, monitor and manage vulnerabilities, and effectively prioritize their responses to security threats.

Key benefits:

Change Monitoring/Management: Sourcefire RNA persistently monitors networks and provides notifications on any observed changes including the introduction of new network assets or services, new behaviors, anomalous traffic patterns and policy violations.
Vulnerability Identification: Sourcefire RNA automatically associates changes in network assets with potential vulnerabilities and exploits that may target those vulnerabilities.
Meaningful Correlation: The Sourcefire Management Console tightly integrates RNA events about change on the network, Network Sensor events relating to intrusion attempts, and current vulnerability information to determine why change may have occurred and whether or not an attack poses a real threat.
Automated Security Optimization: Unless administrators know the systems being monitored by an IDS, deployed policies will inevitably produce either false positives or false negatives. With Sourcefire RNA, it is possible to precisely determine the network profile and actively optimize system configuration to eliminate both inherent false positives and false negatives.

	Call (407) 598-1860 or email support@csisoft.com to get technical support for CSI products