Most network attacks primarily use web pages or authorized services such as email, instant messaging or IP telephony. Each of these applications uses a unique communications protocol. To block such attacks without affecting a company’s day to day business activity, it is necessary to provide protocol analysis.

In evaluating intrusion prevention technologies, inspection performance and detection quality are key considerations. Optimal efficiency is achieved by the IPS sharing synergies with other technologies. Integrating an IPS with an application firewall, user recognition or vulnerability audit delivers improvements in its relevance.

An IPS system can lie at the heart of a multifunctional firewall deployed at segmentation points. It can also operate in transparent mode without the need to modify an existing network infrastructure. NETASQ’s IPS is the result of 10 years of research. It combines several protocol and compartment analysis technologies to offer Zero-Day protection, detecting and blocking most threats even before they are published.

NETASQ’s IPS signature lists are updated automatically and NETASQ security monitoring devices add large numbers of signatures to their lists every day. NETASQ chooses the most effective protection technology to address each new security loophole. Key factors include capabilities for optimizing detection, the ability to anticipate future attacks and of equal importance, is the ability to avoid the risk of false positive alerts.

Developed within NETASQ’s operating system, the IPS engine offers real-time analysis of different traffic flows. It does not cut or copy either the data or the exchanges between the operating system and the detection software. The architecture is tailored to optimize performance and is particularly effective at high throughput levels or where absence of latency is a critical factor, such as in VoIP applications.

Network security is a race against time in which attack often leads defence. Some attacks, known as Zero-Day exploits, spread before any official communication can be issued. Hackers take advantage of them before they can be notified to the software company or the world at large.

Once a threat is identified protection signatures are created and deployed as rapidly as possible. This is far more effective than waiting for days or even weeks for corrective action to be taken. But however short the period, the vulnerability is real.

Anyone who is responsible for network security has to be constantly on the lookout for effective Zero-Day protection to counter Zero-Day exploits.

NETASQ’s intrusion prevention engine has been designed to maximize its Zero-Day protection capabilities. A number of complementary technologies are deployed, including protocol inspection, abnormal behavior detection and pro-active creation of protection signatures

These three forms of analysis are effective because they don’t have to wait for a vulnerability to appear. The cornerstone of NETASQ Zero-Day protection is protocol inspection.

NETASQ’s security monitoring teams anticipate future attacks by continuously adding new inspections for each protocol. Thus, the SIP voice protocol already incorporates various levels of protection against identity theft and denial of service. These effective analyses are activated on all.

The implementation of IP telephony has seen enormous growth in recent years.

Maturing technology and falling costs have coincided with the convergence of voice and data. The ability of the phone system to now carry network data enables resource optimization. At the same time, the network can also manage the telephony system and carry voice data.

However, these developments have been accompanied by a rise in malicious attacks exposing vulnerabilities associated with both technologies. IP networks and voice protocol weaknesses can be exploited by denial of service attacks at both the application and protocol levels. Identity theft and unauthorised recording of telephone conversations can lead to malicious data access. SQL injection attacks result in the theft of confidential information.

An effective security system is now a prerequisite for any organization wishing to protect its telephony and network assets.

NETASQ’s network protection solutions allow customers to secure all of their network assets. They guarantee the security of IP telephony systems, while their advanced functionality enables them to deal with the special requirements of real-time data and all aspects of converged voice and data networks.

The vulnerabilities inherent in any IP telephony system represent a risk to security. Attacks can lead to denial of service, remote code vulnerability and hijacking of sensitive data. NETASQ solutions contain the NETASQ Vulnerability Manager risk management system to detect vulnerabilities in all of the network’s active components. The service delivers specific reports, seeks vulnerable devices and suggests appropriate corrective measures. Effective procedures can then be implemented to manage the vulnerability risks within an IP telephony system.