Firewall
Linux Plus employs Linux-based firewall systems which provide an excellent alternative to often-expensive and less-customizable proprietary solutions. This allows our customers to secure their Internet gateways and enforce network-use policies in a flexible, cost-effective manner. Linux enjoys a battle tested networking stack and packet filtering framework that provides extremely fast packet processing even under Gigabit speeds, together with field proven security. Linux Plus offers Linux based firewalling solutions that offer but are not limited to the following functionality:
- Hardened TCP/IP stack for Internet facing gateways
- Stateful packet inspection firewall
- Optimized firewall rules allowing secure and optimal packet flow on a multi-homed gateway
- Secure logging of invalid packets usually signifying an attack
Intrusion Detection/Prevention System
An intrusion detection system is used to detect many types of malicious network traffic and computer usage, that can't be detected or blocked by a conventional firewall. This includes network attacks against vulnerable services, data driven attacks on applications, host based attacks such as privilege escalation, unauthorized logins and access to sensitive files, and malware (viruses, Trojan Horses, and worms). It works by intercepting network traffic and recognizing predetermined malicious signatures, as well as performs traffic assembly and analysis. IDS can be a very useful tool in analyzing external security threats in addition to providing early warnings about potential breach attempts.
Intrusion Prevention takes IDS to the next step. An IPS solution aims at linking a running IDS solution to an already up and running firewall. The idea is to block the malicious network user or attacker using the firewall, once the IDS has signaled some traffic as potentially dangerous. Avoiding false positives or locking out unmalicious users takes a high degree of IDS familiarity and security expertise. Linux Plus' security team can help analyze the customer's environment and prepare appropriate IDS-Firewall integration service. Couple this with an advanced analysis console and real-time warnings, and your administrators are well prepared to defend your organization's services.
|
|
|
