Hackers targeted by high-level system
Defiance TMS system will protect web servers across large enterprise.
By John E Dunn | Techworld | Published: 16:07, 24 January 2005
Kavado has launched the first intrusion protection system designed specifically to secure web applications for large enterprises.
Building on the Company’s established products, InterDo and ScanDo, the new Defiance TMS (threat management system), is claimed to be able to scale to protect and manage a large number of servers at once.
Until now, web application protection systems had been designed to cover only a small number of servers on single sites which left companies protecting them on a piecemeal basis, the company CEO Vikram Desai said.
Running on Windows, Linux or Sun, Defiance TMS was made up of four elements. Defiance Monitor acted as the intrusion detection system (IDS), which would let IT staff monitor for threats. Defiance Gateway was the core IPS protection element, backed up by A Defiance Management Server to store logs and other security data, and the Defiance Security Console for system unified administration.
Desai was keen to emphasise the system’s “Intelligent Escalation” technology, which made it possible for it to react to a threat discovered at one location by tightening the level of monitoring and protection at other sites without user intervention.
On interesting capability is that Defiance TMS can feed security data into high-level management systems such as Tivoli, potentially making it the first product that can give companies a unified view of security issues across different layers of the network from perimeter to application. To date, this has been one of security’s problem areas - having to run multiple systems in order to monitor security across a network and having to reply on primitive SNMP traps at that.
As to the fate of InterDo, but it is clear that Kavado wants to move as many customers as possible to the new platform. “We will still support it but will offer customers a migration path. There will be some feature enhancements released for Interdo,” said Desai. Those wanting to move could buy only the monitoring program if that suited their needs.
The company rolled out Yankee Group senior analyst Jim Slaby to back up it claims for the new software. "Kavado's Defiance TMS brings some unique capabilities to the intrusion detection and prevention product segment that can help companies more effectively detect, alert, and block attacks without adversely affecting operations," he was quoted as saying.
Defiance Monitor is available now, with the full Defiance TMS shipping towards the end of the first quarter. The full system starts at £31,470 ($52,980) for an initial deployment. If desired, Defiance Monitor can be purchased for standalone use starting at £6,831 ($11,500).