Cisco ASA Cyber Threat Defense: Part 2

Posted in advanced persistent threats, ASA, cisco ASA, Cisco NetFlow, cyber crime, denial of service attack, internet security, internet threat, threat detection on April 17th, 2013 by Jimmy W
Cisco ASA Cyber Threat Defense: Part 2

The Cisco ASA is a great tool for Cyber Threat Defense. In part one of this blog I described the 3 components of Cisco’s threat defense solution. In this half I will be showing you some more benefits of the solution, and how it can be used in correlation with other technologies to give you end to end visibility in your network.

Read more »

Jimmy Wendler

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , , , , , , , , , , ,

Intrusion Detection: Event Correlation

Posted in advanced persistent threats, Event Correlation, network threat detection, Security on March 8th, 2013 by James
Intrusion Detection: Event Correlation

Network Intrusion Detection, Cyber Threats, Advanced Persistent Threats (APTs), Polymorphic Malware, Event Correlation – today all of these terms are foremost on many IT Security Professionals minds. What cyber security layer can we add to our existing protection efforts that will bring us greater peace of mind? Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , , , ,

Internet Threat Defense Solution: Part 3

Posted in advanced persistent threats, internet threat, ip host reputation, netflow and ipfix on March 2nd, 2013 by mike@plixer.com
Internet Threat Defense Solution: Part 3

In many cases, previously unidentified malware and back doors were identified through the use of these indicators in both network traffic and host-based information. The combination of both host- and network-based indicators continues to be the most reliable way to identify APT-related malware on a network.

Read more »

Michael Patterson
Founder and CEO

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , , , ,

Internet Threat Defense Solution: Part 2

Posted in advanced persistent threats, cyber crime, internet threat on February 16th, 2013 by mike@plixer.com
Internet Threat Defense Solution: Part 2

The Magnitude of the Cyber Threat Problem

Earlier this year, CNN stated that 39 Billion was stolen on-line in 2011.  This Fall, Symantec calculated that the total cost of cyber crime in 2012 will reach 110 Billion.  As Dmitri pointed out, every company has been compromised in some way.  Advanced Persistent Threats are expected to continue increasing as shown below.

Read more »

Michael Patterson
Founder and CEO

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , , ,

Cisco ASA Internet Threat Defense Solution Webcast

Posted in advanced persistent threats, cisco ASA, NSEL, threat detection on February 7th, 2013 by Laura
Cisco ASA Internet Threat Defense Solution Webcast

In our February 14th webcast, we will present how the Cisco ASA NSEL exports are used to detect network threats that could be missed by the Cisco ASA threat detection logic.  We’ll explain how to improve cyber security layers.

Cisco ASA NetFlow

Attendees on the webcast will learn:

Read more »

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , ,

Internet Threat Defense Solution: Part 1

Posted in advanced persistent threats, cyber crime, denial of service attack, internet security, internet threat, threat detection on February 2nd, 2013 by mike@plixer.com
Internet Threat Defense Solution: Part 1

Building organization confidence surrounding a company’s Internet threat defense effort means we can never let our guard down.  A potential internet security threat could come from anywhere at any-time and it doesn’t have to start from cyberspace.  Many threats are initiated internally by infected handhelds and laptop devices which walk right past the firewall.

Read more »

Michael Patterson
Founder and CEO

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , , ,

Network Forensics and Incident Response Using NetFlow and IPFIX

Posted in advanced persistent threats, Cisco NetFlow, network security, Security on November 10th, 2012 by Adam Powers
Network Forensics and Incident Response Using NetFlow and IPFIX

netflow for network forensicsNetwork forensics can be an intimidating subject. When IT personnel hear the word “forensics” they often recoil with visions of complicated software such as EnCase. Or they may think about expensive packet capture solutions such as Niksun’s NetDetector product line. While these tools can serve a specific purpose, your first line of network forensics defense should always be found in NetFlow and IPFIX…

Read more »

Adam Powers
@adampowers22

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , ,

NetFlow and IPFIX For PCI Compliance: Verify, Investigate, Impress

Posted in advanced persistent threats, Compliance, detect network threats, detecting malware, Flow Analytics, IPFIX, NetFlow, NetFlow Security on September 29th, 2012 by Adam Powers
NetFlow and IPFIX For PCI Compliance: Verify, Investigate, Impress

NetFlow and IPFIX ensure PCI compliance

At least two or three times each week we’re asked how NetFlow relates to PCI compliance. Our answer is crisp and simple. No fancy requirement references or complicated legal speak, just practical advice that’s actually useful for those concerned with the PCI audit process. There are three key areas NetFlow and IPFIX analysis can aid the enterprise as it relates to PCI:

Read more »

Tags: , , , ,

Barracuda IPFIX Support: Network Threat Detection

Posted in advanced persistent threats, detect network threats, NetFlow Security, Netflow Traffic Analysis, network security on August 22nd, 2012 by Scottr
Barracuda IPFIX Support: Network Threat Detection

Earlier this year Barracuda Networks enabled IPFIX support on their NG Series firewalls. This export provides great visibility into your network traffic as well as network Threat Detection.

Let’s take a moment to go over the configuration to get these exports going:

Read more »

Scott Robertson
Sr. Solutions Engineer

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!



Tags: , , , ,

Astaro IPFIX Reporting: Astaro NetFlow Support

Posted in advanced persistent threats, detecting malware, IPFIX, NetFlow, Network Traffic Monitor on August 20th, 2012 by Brian
Astaro IPFIX Reporting: Astaro NetFlow Support

Apparently some of our customers are calling in asking for Astaro IPFIX Reporting support.  It’s always fun to work with a new flow vendor and in this case Sophos who acquired Astaro is exporting IPFIX instead of NetFlow.  Going with IPFIX of course was a very smart decision especially since they are exporting some interesting unique elements.

Read more »

Brian

For a free 30 day trial of Scrutinizer, Download Now!

Sign up for Advanced NetFlow Training™ coming to a city near you!

Tags: , , , , , ,