 |
 |
 |
 |
 |
 |
 |
 |
 |
NarusInsight™ Secure Suite
NarusInsight Secure Suite is the industry’s most advanced real-time traffic intelligence system for real-time identification and mitigation of any unwanted, unwarranted or malicious traffic.
NarusInsight Secure Suite (NSS) enables service providers and governments to detect any network attack, abuse or behavioral anomaly in real time and at core speeds, and then direct a variety of actions: to raise an alarm, send an SNMP trap, or even mitigate the attack. Traditional edge-based security solutions are insufficient for Next Generation Networks and IMS because of their limited visibility into network traffic and elements. They are aware only of partial information of traffic flowing through the single link of the network they are attached or listening to, and their basic statistical algorithms are able to detect attacks only at their last stage, for example large changes in the volume of traffic.
NSS is the industry's most state-of-the-art, carrier-class security system, combining high visibility of the network traffic with full correlation between all the other elements on the network (such as routers, firewalls or IPS/IDS), across all of the links on the network as well as external storage facilities to access historical data. This total network view of combined traffic visibility and network correlation enables unprecedented accuracy and industry-leading performance.
NSS can help reduce operation costs and complexities by correlating the data collected across dispersed sources into a single actionable event. NSS enables service providers Managed Security Services by detecting and mitigating attacks against customers with flexible reporting and customer login access.
System Overview
NarusInsight Secure Suite applies some of the world's most advanced security algorithms based on the revolutionary concepts of Information-Entropy. First in the market, these new algorithms learn the uncertain, unforeseen and fuzzy characteristics of Internet traffic as well as its intrinsic structure while monitoring and profiling the health of the traffic itself - all in real-time. This fusion of total network view and world-class analytics allows NarusInsight Secure Suite to detect a large variety of attacks, ranging from highly Distributed Denial of Service (DDoS) to slow propagating Worms, while constantly adapting to the dynamics of the network.
While NSS is the ideal solution for today's complex carrier networks, the same investment can take you into the future of IMS-based Services over IP. By simply configuring additional modules, NSS can monitor the traffic from next-generation services such as VoIP and IPTV - all without a system-wide upgrade. Narus offers the world's most advanced ultra-high performance IP security system.
Key Features
- The industry’s first Entropy-based security algorithms monitor the equilibrium of the entire network in real-time.
- Real-time data capture, classification and normalization at speeds from 100baseT to 10G/OC192 using Narus High-Speed-Analyzer (raw packets from the wire) and Narus Virtual-Analyzer (IP data from network elements, e.g. SNMP data, flow data from Cisco or Juniper routers, GTP streams from SGSN and GGSN elements, log files such as syslog files from network hosts, etc.)
- Real-time anomaly detection at speeds from 100baseT to 10G/OC192
- Granularity — Superior anomaly detection, across the entire network in real time
- Shortest detection times in the industry minimize attacks before they spread
- Information on all IP traffic, regardless of the protocol or network type
- Utilizes full traffic flow and all network layers of visibility for accurate detection
- Customer proven in the world's largest networks
- Software Development Kit provides customer the ability to customize for unique needs
Key Capabilities
- Network security
- Provides real-time identification and mitigation of any unwanted, unwarranted or malicious traffic
- Traffic visibility
- Offers a real-time, global view into IP networks
- Flexible managed services
- Enables service providers to offer new security services including, DoS, DDoS protection, managed firewall services, VPN services, etc.
- Open interfaces and tool kits
- Simplifies integration and existing security solutions and security managers along with embedded network devices such as routers, deep packet inspection devices and session border controllers
Key benefits
- Increases revenue by offering Managed Security Services
- Maximizes uptime of carrier IP services such as VoIP, PTT or IPTV
- Lowers operational expenses with:
- Increased network efficiency resulting from reduced malicious traffic (less bandwidth wasted on bad traffic)
- Protection of infrastructure, services and customers from the widest range of attacks
- Minimizing penalties associated with not meeting Service Level Agreements (SLAs) by ensuring clean traffic
- Protection of current investment by interfacing with existing security solutions
- Modular, configurable and easy to manage
- Incrementally scales to support expansions in traffic volume and network coverage
