Sep, 2001 : Cisco Announces New Intrusion Protection Systems

📅 September 4, 2001 - Cisco Systems, Inc. (cisco.com), aworldwide leader in networking for the Internet,announced today it is expanding its portfolio ofintrusion protection offerings with the introductionof the Cisco IDS Host Sensor, a host-based solutionfor enterprise-wide intrusion protection, andenhancements to its market-leading network-based IDSsoftware.

Unlike traditional host-based intrusion detectionsystems (IDS), which log attacks but do nothing toprevent them, Cisco says its IDS Host Sensor softwareproactively detects malicious activity and blocksaccess to server resources before serious damage canoccur. The software accomplishes this by interceptingsystem and API level calls to the operating systembefore the OS processes the calls. It then determinesif the call is malicious or benign. If the call ismalicious, the Cisco IDS Host Sensor's policy databasedictates which preventive action should be taken, suchas terminating the call, terminating the process thatlaunched the call or sending out alerts about thesuspicious activity.
"New and increasingly ominous security attacks requirevigilant monitoring of our e-business infrastructure,"said Bill Stevenson, network security officer at NewCentury Mortgage. "The Cisco IDS Host Sensor is apowerful tool, providing the necessary intrusionprotection of business-critical resources."
Based on technology from Entercept SecurityTechnologies, the Cisco IDS Host Sensor softwareunderscores Cisco's strategy of delivering productsand solutions that enable customers to adopt a"defense-in-depth" approach to security, in whichcritical systems are fortified throughout a network --not just at the perimeter. This strategy is a keypremise behind SAFE -- the security blueprint forCisco AVVID (Architecture for Voice, Video, andIntegrated Data). As an integral component of SAFE,the Cisco IDS Host Sensor can be easily andcost-effectively integrated and managed in any networksecured by Cisco. Additionally, complementarysolutions and services are also provided by CiscoAVVID partners that further enhance the Cisco IDSproduct line.
The Cisco IDS Host Sensor is capable of stopping bothknown and unknown attacks, including the notoriousCode Red Worm virus. It also features a database thatcan be automatically updated with defined and genericattack behaviors affecting server resources, providingadditional protection against future threats andvulnerabilities.
Cisco also announced version 3.0 of its market-leadingnetwork-based IDS appliance software, Cisco IDSNetwork Sensor. Like the Cisco IDS Host Sensor, italso offers protection from the Code Red Worm virus,available since the initial attack. Also included isan Active Update signature mechanism enablingautomatic distribution of signatures, an extremelyrobust signature language allowing customers to writetheir own signatures, and extensions to the ActiveResponse capability adding support for the Cisco PIXFirewall family and Cisco Catalyst switches.
The Cisco IDS Host Sensor is sold as a part of theCiscoWorks VPN/Security Management Solution. Othercomponents of VMS include the VPN Monitor, whichmonitors and troubleshoots enterprise site-to-site andremote access VPNs, and a new version of Cisco SecurePolicy Manager. CSPM provides a powerful policy-basedsecurity management system for Cisco's PIX Firewallfamily, IOS routers, and network-based IDS solutionswith new task-based GUIs and wizards. The CiscoWorksVPN/Security Management Solution gives customerseverything they need for managing VPNs, firewalls,network and host-based IDS solutions in one affordablepackage.
"The Cisco IDS Host Sensor is an important extensionof Cisco's security monitoring and managementportfolio, giving customers comprehensive network andhost-based intrusion detection capabilities," saidRichard Palmer, vice president and general manager ofthe Cisco VPN and Security Services business unit. "Itexemplifies Cisco's continued commitment to providecustomers with practical security solutions fortoday's e-business demands."
The Cisco IDS Host Sensor, which includes a managementconsole and evaluation agents, is available today aspart of the CiscoWorks VPN/Security ManagementSolution, starting at US$7995. The Cisco IDS HostSensor is also available today standalone for US$5000.The agents are available separately starting at $1750for Standard Edition and $2150 for Web Server edition.