Enterprise Protection Suite
Business Challenge--Protecting Networked Information
Successful enterprise and government organizations are increasingly sharing data with and opening network access up to customers, partners, suppliers, investors, and government regulators. The more open they become, the more likely they are to experience costly business disruptions, financial losses, compromise of intellectual property, brand devaluation, or serious conflicts with data privacy and protection laws.
The Counterpane Solution
Counterpane's Enterprise Protection Suite of managed security services provides customers with the industry's most complete, single-source network security solution. As the inventors of Managed Security Monitoring, our foundation in real-time internal network and host-level protection is augmented by managed internal and external network protection services, including vulnerability scanning, outsourced firewall, IDS and IPS management, email scanning, DDoS prevention, and security consulting services.
Enterprise Protection Suite Benefits
INTELLIGENT DETECTION: Counterpane's proprietary detection system, developed over five years with $40 million invested, eliminates the massive volumes of false positives generated by your network, and correlates suspicious messages with known threats, attack signatures, threshold patterns, vulnerabilities, and events seen across 500 networks. Security Analysts use this system to alert you to the next Zero Day attack with focused, surgical solutions, not broad-based recommendations.
BROAD NETWORK VISIBILITY: We use 82,000 event signatures developed to support a wide range of existing and custom network data sources that far exceeds any competing service alternative. Customers experience maximum flexibility integrating and choosing network vendor technologies.
INSTANT RESPONSE: Counterpane's incidence response process, refined over five years of operation, provides your organization with a robust, highly defined process using Security Analysts—on call 24x7x365—to provide real-time analysis of critical events, and determine who in your organization should be contacted and which actions should be taken.
DEEP EXPERTISE: Expert, certified Security Analysts and engineers with unparalleled knowledge and skills in network security and incident handling, spanning all leading OS, product, vulnerability, and hardware platforms, are guided by CTO Bruce Schneier, who provides the company and industry with critical thought leadership.
COMPLIANCE WITH DATA PRIVACY MANDATES: Monthly audit reports of network incident activity provide auditors with required backup to demonstrate compliance with Sarbanes-Oxley, Gramm-Leach-Bliley, HIPAA, SB 1386, the EU Privacy Directive, and others.
GLOBAL COVERAGE: Monitoring over 500 networks spanning 38 countries with cross-referenced, correlated events means Counterpane sees more than any internally managed system to prevent known and unknown, quickly propagating, zero day attacks.
LEAST DISRUPTIVE INTEGRATION AND OPERATION: Architected for low-impact installation and minimal network disruption, system data from network data sources ranging from firewalls and IDSs to operating systems and applications is easily collected by our security appliance, Sentry, installed within hours inside the customer network.
LOWEST TOTAL COST OF OWNERSHIP: Scaling highly trained security experts in Security Operations Centers staffed 24x7x365 across hundreds of networks, Counterpane provides the lowest possible cost of access to this highly valuable, scarce resource armed with industry best practices.
Managed Security Monitoring is the foundation of Counterpane's services. Supporting the widest range of internal network data sources and spanning 500 networks in 38 countries, the service provides an “out of the box” incident response process to handle suspicious activity, rogue scans, unauthorized access, DoS attacks, misuse of Web applications, and insider abuse.
Three proprietary technologies facilitate our carrier-grade Managed Security Monitoring services:
- Sentry, a low-impact security appliance, installed inside your network, collects, sorts, correlates, and analyzes data from the widest available range of network devices.
- Socrates, a powerful correlation engine located in distributed, fully redundant Security Operations Centers, correlates Sentry data in relation to unique customer circumstances and across 500 customer networks. Socrates alerts Security Analysts and customers to potential threats in real time.
- The Web Portal provides a window into network activity for real-time forensics analysis, network tuning, dynamic report generation-and audit reporting for compliance with regulations such as Sarbanes-Oxley, GLBA, HIPAA, the EU Directive, and California's SB 1386.
Managed Vulnerability Scanning, certified by MasterCard's Site Data Protection (SDP) compliance program, both complements and enhances our Managed Security Monitoring by cross-referencing the real-time monitoring data against a continuously updated inventory of an enterprise's assets and its current state of operation.
Device Management optimizes investment in network security devices by applying best practices and performance tuning based on real-time monitoring of your network. Expert analysis of your network activity drives initial and ongoing device configurations. Our visibility into 500 networks and emerging global threats drives operation and maintenance priorities of managed network IPS and IDS, host IPS, and firewall products.
Active Response leverages Managed Security Monitoring by allowing Counterpane to make quick, effective changes on an enterprise's security perimeter in conjunction with Counterpane managed IPS technology deployed in the customer's network.
Counterpane's Email Scanning services, powered by MessageLabs, proactively protect against spam, viruses, and other malware threats entering your network, and enable enforcement of email security policies regarding image and text content in inbound and outbound email traffic. With no additional hardware or software, our dynamic, perimeter-based solution dramatically reduces email attacks and abuse while lowering the cost of managing your email security.
DDoS Prevention services proactively protect public Web sites against external attacks, up to multi-gigabit-per-second DDoS attacks. The service absorbs attacks by filtering out malignant packets from your inbound Web traffic and simultaneously delivering purified traffic back to your network.
Security Consultants with proven methodologies and cross-industry best practices utilize knowledge stored in Socrates to provide policy, architecture, program implementation and continuous process improvement solutions. Security Consulting services optimize network configurations to increase defense effectiveness, improve detection capabilities, and create natural links between policy and operations.
Enterprise Protection Suite PDF
White Paper: Enterprise Protection Suite - How Enterprises are Gaining Strategic Advantage Through Protected Networks™
Enterprise Protection Suite SME Edition
Designed specifically for the security needs and resources of small and mid-sized enterprises, Enterprise Protection Suite SME Edition allows small and mid-sized enterprises the highest level of protection through round the clock monitoring and management of critical security devices by security experts at a fraction of the cost of doing it themselves.
Enterprise Protection Suite SME Edition is available though authorized VARs.
|
privacy policy 
