Enterprise Networks

An enterprise set-up has multiple parallel network nodes with varying levels of hierarchy. The network security devices installed in such set-ups thus, constantly face the challenge of performing data break-up & analysis of the logs generated from these multiple security devices then identify & filter the bugs from the false positives, and then take a corrective action. Absence of a common thread between various IPS and IDS installed at multiple levels in an enterprise is thus the biggest obstacle in achieving objective and active troubleshooting of threats to the network security.

CNAM with its unique correlation logic enables the Security Operations of an enterprise to monitor, correlate and analyze the data throughout the network on a single console. CNAM's correlation engine provides the much needed power to cross correlate between raw logs and pre-processed information. This allows the users to identify detected attackers by establishing a correlation pattern between open source security feeds and network level activity. Also the user can implement the freely available information provided by the correlation engine to ensure a more secure network. The correlation engine used by CNAM is extremely flexible to fit in the requirements of varied network distribution of different set-ups can be easily scaled up to add new networks to the existing set-up. CNAM can be installed in almost negligible time as compared to the installation time taken for incorporating an IDS or IPS in an enterprise set-up.

CNAM, thus, is an integrated network security solution that has tremendous scope of application in enterprise verticals such as Enterprise Infrastructure, Multiple Infrastructure Locations, Research & Development Infrastructures, etc.

Challenges: Managing security for the web infrastructure

• Managing security landscape of multiple enterprise locations from a single console in an enterprise identification, validation, and management of the security incidents of different sites is a time consuming task as there is no central console for managing all the sites.
• Managing multiple sensors creating false positives having multiple sensors at multiple sites of an enterprise generates huge logs and multiplies the instances of false positives generated on account of mismatching of the hash value of a valid data packet.
• The Latest IPS/IDS signatures are insufficient even with the most advanced network security firewalls, IPS and IDS and with continuous virus definition updates and signatures the organization networks are still penetrated and hacked.
• Compliance standards monitoring adhering to the guidelines, procedures and compliance standards post acquiring compliance certifications such as PCIDSS, HIPPA, GLBA, ISO, etc. and monitoring the breaches is one of the most difficult activities.

Benefits of using CNAM

• Monitoring security landscape across multiple sites CNAM eliminates the need for Security Operations to understand the extensive log formats generated from the multiple sites of an enterprise and simplifies the execution of measures to troubleshoot the security incidents from a single console.
• Reduction of false positives with a strong central repository and leveraging on the capability of advanced correlation, CNAM is an advanced network management tool to reduce the false positives generated by network firewalls, IPS, IDS, etc.
• Real-Time attack intelligence the global central repository of the CNAM enables real time attack intelligence with the aid of continuous sourcing of security feeds that are updated on a continuous basis.
• Detect vulnerability exploration activities on the web site with the unique co-relation feature that is an inherent property of the CNAM, an organizations Security Operations is able to monitor and analyze vulnerability exploration activities by an intruder or a hacker and equips an organization to take proactive approach towards securing the network.
• Real-time business focused advisories on attacks happening across the globe the central global repository studies and identifies various security incidents globally across all the business verticals and domains and helps CNAM to generate and provide advisories.
• Business focused customized correlation with CNAM an organization can customize and consolidate all the information across all its business verticals and utilize it to its benefit.
• Compliance monitoring & reporting CNAM allows an organization to monitor, identify & alert any breaches in adhering to the guidelines and procedures post-compliance acquisition.
• Scalability and deployment time CNAM can be deployed and scaled within a short span thereby reducing the time for ROI (return on investment).