Intrusion Detection Takes Center Stage At N+I

Network Associates Inc. will be rolling out CyberCop Monitor (CCM) for Windows NT this week, in hopes of fortifying what a company official called "the weakest link in security."

That's the desktop, said Andrew Maguire, product marketing manager at Network Associates, Santa Clara, Calif. People accessing the Internet creates vulnerability to viruses, Maguire pointed out, but it is the ever-increasing mobility of computers that poses more serious threats to enterprise data.

"There may be data on [the machine] that you want to protect while it is at home or on the road," Maguire said. "By putting intrusion detection on the desktop, you have security that is a lot more manageable than other intrusion-detection solutions out there."

Typically, intrusion-detection software is either host-based or network-based, Maguire said. CCM for NT in effect combines the best of both worlds by looking at attacks coming into the box at the network level, and also at attempted intrusions on a host machine.

CCM for NT can be managed via Microsoft Management Console (MMC) and will include SNMP support in December. Maguire said other Network Associates software, including Gauntlet and VirusScan, are being written to MMC.

A one-user license of CCM for NT costs $114, while 1,000 nodes cost $17 each. Maguire said the pricing would probably be reviewed and possibly increased.

Network Associates also offers suite pricing on a bundle of all three of its intrusion-detection products, which includes CyberCop Sting and CyberCop Scanner. Those products are already available for Windows NT.

CCM for Solaris 2.6 will ship in October, and a version for Hewlett-Packard Co.'s HP-UX will ship by year's end.

In related news, Network ICE this week will be demonstrating Enterprise ICEpac 2.0 for Windows NT, 98 and 95, which is slated to ship on Oct. 1.

The new rev of ICEpac includes Network ICE's BlackICE agents, which reside in individual network nodes, and the company's management console, called ICEcap.

Officials at San Mateo, Calif.-based Network ICE said their products halt would-be intruders and help capture them by tracing their whereabouts on the network.

In other news, Telemate.net Software Inc., based here, will show the 4.33 release of its Web and network-usage reporting package, which now analyzes data coming from Cisco Systems Inc.'s NetRanger intrusion-detection software as well as proxy servers, firewalls and other network citizens.

"It has the latest rev of Microsoft SQL Server, and it has a nicer GUI," said Andy Reese, president of integrator Reese Web, Clearwater, Fla. "But they need to be looking at integrating with other security vendors' [intrusion-detection], not just Cisco's."

Telemate may consider interoperability with intrusion-detection systems from Axent Technologies Inc., Network Associates and other vendors if the interest is there, said Kent Jones, executive director of channel sales.

Pricing is based on the number of data sources--such as a proxy server or firewall--being tracked, Jones said, and starts at $995.

Tweet

   

More Channel Programs