SiteVaxinPro Case Study

1
SiteVaxinPro Case Study

• Netmagic Solutions Private Limited
• NetMonastery Network Security Private Limited

2
Contents

• Netmagic A Profile
• The Need Overview
• Risk Assessment
• The Solution (SiteVaxinPro)
• Evaluation Process
• Deployment Options
• Testimonials
• Business Benefits

3
Netmagic A Profile

• 3 out of 6 of Indias top online applications
  are hosted with NetMagic
• Source Alexa Industry Traffic Reports, 2002
• Netmagic offers the most comprehensive service
  packages
• Committed to provide atleast 99.95 uptime
• Key Points
• Business Knowledge Client Orientation
• Exceptional Technical Skills
• Best Available Infrastructure

4
Netmagic Services Clienttelle

• Services Offered
• Managed Hosting and Collocation
• Remote Infrastructure Management
• Disaster Recovery and Business Continuity
  Services
• Security Services
• Corporate Mail and Messaging Application Services
  (SMS and VoIP services)
• Bandwidth and Connectivity Solutions
• Internet Datacenter Facility design
  Implementation
• Professional Services (Consulting and
  Implementation)

• Clienttelle
• IBM
• Wipro
• Tata Consultancy Services (TCS)
• World Network Services (WNS)
• Crown Worldwide
• eBay India
• CNBC India (Moneycontrol.com)
• Dhan-dhan-a-dhan Online Lottery
• IDBI
• JM Morgan Stanley
• NSE-IT
• ICICI Infotech
• Indiainfoline.com
• Mediaturf
• Wisden Cricinfo
• BASF

5
The Need
The underground releases more attack tools than
the security jargon available to describe them
Luke Ashcroft

• Internet attacks are becoming easier
• Script kiddies use easily available attack tools
• Serious vulnerability research has lead to more
  unknown attacks (0day exploits) being created
• Active attackers employ paranoid techniques to
  get their way

6
The Need Netmagic

• Need to upgrade existing intrusion detection
  technology to prevention systems to proactively
  ensure high levels of security to hosted
  customers
• An integrated detection and prevention system
  that would enable Netmagic to provide better,
  tighter security solutions
• An low-overhead solution to window attacks that
  can occur between a vulnerability release a OS
  patch
• All in One solution (IDS, IPS Firewall) with
  good networking capabilities
• A solution for zero day attacks and worms
  (unknown attacks) for its customers

7
Risk Assessment

• Common Threats
• Worm Attack
• Unknown OS Vulnerability Attack
• Unpatched System Compromise
• Application Protocol Attack
• Common Detection Failures
• IDS Log Flooding
• DoS DDoS Attack

• Recoverable Risks
• Network Downtime
• System Compromise
• Loss of Data / Integrity
• Network used as an attack launch pad
• Network Latency
• Attacks causing client server compromise
• Available Countermeasures
• Firewall
• Intrusion Detection Systems
• Virus Detection Framework

8
The Solution

• NetMonastery SiteVaxinPro 8030
• Network Attack Prevention Systems (NAPS)
• Built for a datacenter environment
• High Speed / Low Latency device
• High Availability Options
• Key Features
• 2 Zone NAPS (External, DMZ) / Throughput 86
  Mbps
• Prevention against Infrastructure, Protocol,
  Application and Service Attacks
• Inbuilt Protocol / Traffic Anomaly System for
  unknown Application Protocol Attacks DoS
  Defense
• SiteVaxinPro is extremely configurable with a
  central management console the Vaxin Management
  System

9
Network Attack Prevention System
Signature Detection
Payload Analyzer
Reporting Subsystem
Stateful Firewall
Traffic Normalizer
Logging Facility
Traffic Normalizer
Protocol Anomaly
Traffic Anomaly
10
SiteVaxinPro Console
11
Evaluation Process

• The Netmagic technical evaluation team evaluated
  SiteVaxinPro 8030
• The device was feature tested and a few custom
  improvements were suggested
• A rigorous performance test was conducted with
  different network operating conditions
• All of SiteVaxinPros attack detection
  capabilities were evaluated in a test lab
  environment

12
Deployment Options
Server Banks
Internet
SVP - 8030

• SiteVaxinPro gives multiple deployment options
• Commonly used address translation offering
  network segregation features (Network Address
  Translation or NAT)
• Multi-Gateway options for use under many to one
  network scenario (Bridge Mode)
• Netmagic is considering an introduction of an ASP
  service that would provide attack prevention for
  its clients using SiteVaxinPro

13
Testimonials

• Sharad Sanghi CEO Netmagic Solutions
• Productivity
• Helps a datacenter decrease the resources
  required for intensive patching of vulnerable
  servers
• Attack Prevention
• Most lethal application attacks can be prevented
  with its application protection system
• Network Integration Deployment
• SiteVaxinPro is a highly configurable device
  that almost instantly fits into any network

14
Business Benefits

• Better the existing infrastructure for protection
  against network attacks worms
• Increased productivity for IT staff resources
• Reduced cost of ownership for clients with
  additional ASP options
• Further decreases the probabilities of downtime
  due to security attacks
• SiteVaxinPro complies to the 99.95 uptime target
• Ease of network security monitoring integration
  into existing network monitoring systems

15
Our horizons have Moved

• Thank You

16
h t t p / / w w w . n e t m o n a s t e r y . c
o m