• Intelligent Cybersecurity
  • Intrusion Prevention
  • Network Visibility
  • NBA
  • Virtualization
  • IT Policy Compliance
• Compliance
• Vertical Industries

Intelligent Cybersecurity

Raise Your Security IQ with Sourcefire's Adaptive Network Security Solutions

Traditional, static network security solutions—lacking the contextual awareness required to defend rapidly changing networks, applications, and hosts, and requiring expensive manual intervention for routine tasks—have demonstrated they're unable to adequately protect today's networks. Despite continuing investments of time, energy, and people, embarrassing and costly security breaches remain shockingly routine.

What today's organizations need is a new, dynamic approach to securing critical information on the network. An approach that constantly adapts to new threats, new vulnerabilities, and everyday changes to the network. An approach that leverages network information to automatically assess and prioritize attacks. An approach that can ferret out even subtle changes in network activity that may provide the only warning of a successful compromise.

Sourcefire's intelligent cybersecurity solutions embody that approach, delivering innovative, market-leading technologies that provide the advanced capabilities required to defend against today's rapidly changing threats.

Adaptive Network Security Solutions

Sourcefire’s intelligent cybersecurity solutions addresses numerous facets of network security.

Intrusion Prevention – Sourcefire is widely regarded as having the most comprehensive intrusion prevention system (IPS) available today, powered by the de facto standard Snort® rules-based detection engine. To take Sourcefire IPS™ to the next level, leverage the real-time network intelligence of Sourcefire RNA® (Real-time Network Awareness) to enable Adaptive IPS, which saves time and money by significantly reducing the number of events needing review and automating the ongoing IPS tuning process.

Network Visibility – Sourcefire RNA provides a real-time inventory of operating systems (OSes), services, applications, protocols, and potential vulnerabilities that exist on the network. Once RNA has established a network inventory baseline, its powerful Policy and Response engine can notify Information Security or Network Operations when a new host appears on the network and/or when an existing host has changed its approved configuration.

Network Behavior Analysis (NBA) – Sourcefire’s NBA solution solves the daily challenges faced by Information Security and Network Operations professionals. Sourcefire RNA enables Information Security to detect and quarantine internal threats by establishing traffic baselines and detecting network anomalies. RNA enables Network Operations to monitor bandwidth consumption across the network and troubleshoot network outages and performance degradations.

Virtualization – The Sourcefire 3D® System defends both physical and virtual environments. Sourcefire provides a complete virtual network security solution, enabling intrusion prevention, real-time network awareness, and management. Sourcefire's virtual appliances are fully interoperable with its physical security appliances, avoiding the cost and inefficiency of multiple, diverse security systems. In addition, by placing physical Sourcefire 3D Sensors at ingress and egress points to your virtualized systems, Sourcefire can detect, alert, and block threats that emerge from inside and outside your virtualized systems. To help combat 'VM sprawl,' IT Security can identify new hosts in real time as either physical or virtual, and personnel can be alerted to audit new virtual hosts for compliance with configuration management, change management, and acceptable use policies (AUPs).

IT Policy Compliance – Many organizations have documented IT AUPs, but few have the means to monitor and enforce them. Sourcefire provides the capability to model and enforce AUPs with compliance white lists, which specify the OSes, services, applications, and protocols that are approved for use on the network. This affords IT the opportunity to mitigate non-compliant systems and harden the network before attacks occur.