Security Solutions

Home

Security Solutions

TechXact’s Firewall Solution - The First Line of Defense

It’s a fundamental requirement – you need to secure your perimeter to secure your resources.

Internet growth over the last ten years has been phenomenal – driven by the recognition that it could be used as a business tool, rather than simply somewhere to host newsgroups and an infrastructure for the technical elite to communicate. The Internet has transformed the way that we all do business – e-mail communication is as critical as telephony, and immediate access to information is a given. Competitive pressures are driving e-commerce. Business-to-business Extranets reduce costs and time to market by streamlining the supply chain using electronic communications with suppliers and partners. Business-to-consumer applications provide another route to market for products.

Perimeter security addresses the security at the edge of the private network – where it connects to the public Internet. An access control policy is used to protect an organization from security threats by specifying what data can enter and leave an organization’s network. Gateway firewalls are used to enforce this policy. Once the only security deployed by many organizations, today firewalls are seen as a building block in an all-encompassing tiered approach to network security.

Firewall Benefits

Firewalls protect private local area networks (LANs) from hostile intrusion from the Internet. Consequently, firewall protection allows many LANs to be connected to the Internet where Internet connectivity would otherwise have been too great a risk.

Firewalls allow network administrators to offer access to specific types of Internet services to selected LAN users. This selectivity is an essential part of any information management program, and involves not only protecting private information assets, but also knowing who has access to what. Privileges can be granted according to job description and need rather than on an all-or-nothing basis.

As an end-to-end network security provider, TechXact is uniquely positioned to offer security solutions that can be deployed at key points of vulnerability across the network. TechXact understands the security challenges that organizations face today, and empowers its customers to safely engage in business by providing them with best in-class security solutions.

TechXact Security Solutions addresses all firewall considerations including:

  Hardware appliance or a software based firewall solution
  Dedicated or hybrid firewall solution
  Interoperability with existing security systems and solutions
  Head Office, Branch Offices and Remote User VPN requirements
  Administrator training
  Level of support required - basic to fully managed

Intrusion Detection System / Intrusion Prevention Systems

TechXact’s intrusion detection system (or IDS) detects unauthorized access or misuse of a computer system. Intrusion Detection Systems act as the sentry watching around the clock for suspicious activities, and instantly sending out alerts when needed. Walls stop mass attacks and invasions, but can possibly be climbed, penetrated or hacked if no one is watching.

IDS systems sound alarms and sometimes even take corrective action when an intruder or abuser is detected. Many different intrusion detection systems have been developed but the detection schemes generally fall into one of two categories, anomaly detection or misuse detection. Anomaly detectors look for behavior that deviates from normal system use. Misuse detectors look for behavior that matches a known attack scenario.

Detection sensors perform real-time intrusion monitoring, detection, and prevention of malicious activity by analyzing kernel-level events, host logs, and network activity on critical servers. Server sensors monitor, detect, and prevent intrusions with packet interception, blocking capability, and automated correlation analysis using security fusion technology. Policy-based security management is an approach that manages the security technologies using high-level policies while handling the minute details transparently in the background. New corporate policies like FTP access for every department, response to a newly discovered attack strategy, or a migration to updated software releases, can all be handled quickly and seamlessly by this solution. Additionally, an easy to understand graphical view of the whole Secure Perimeter in an enterprise improves overall security.

Invisibly connected to your network perimeter the IDS sensor monitors all network traffic for the presence of unencrypted personal information where it is normally prohibited. IDS detects unencrypted critical customer personal information and reports potential violations within seconds of detection with details of the source, the destination, the exact personal information identified and how it was being transferred. TechXact’s IDS provides real-time alerting and auditing with 100% accuracy and prevents personal information from leaving the secure zone.

TechXact’s watches every port, every protocol, and acts as a data "safety net", inspecting all clear-text packets attempting to enter or leave your network. Unlike other systems that intermittently scan, "sample" traffic or narrowly focus on only a few communications protocols, IDS recognizes your customers’ personal data across all ports and all protocols, including database accesses, file transfers and attachments such as spreadsheets, presentations and word-processing documents. TechXact’s IDS detects anything that violates privacy regulations when traveling outside the network unprotected.

TechXact creates effective defenses before attacks ever occur. So in contrast to the “reaction” that conventional solutions offer hours after the attack, preemptive solutions are in place ahead of the attack – by days, weeks or even months.

The Research Edge

Aggressive, in-depth security research is – and always has been – the core of TechXact and all of its products and services. Our innovative research methods are aimed at the business applications, operating systems, and network operating systems that compromise the evolving infrastructure of commerce.

Vulnerability Assessment

The first step in protection for online resources is locating where information is stored, understanding the security measures in place that guard that information, and identifying vulnerabilities and suspect configurations that place information at risk. Vulnerability assessment solutions work at the workgroup and enterprise level, providing critical knowledge and advance warning of potential online security risks across network, server, database and wireless operations.

Internet Scanner

The Internet Scanner application provides comprehensive network vulnerability assessment for measuring online security risks. Internet Scanner performs scheduled and selective probes of communication services, operating systems, applications and routers to uncover and report systems vulnerabilities that might be open to attack.

Standard Methodology

TechXact FZ LLC has developed a thorough Network Security Architecture Design methodology that includes:

	Project Initiation – TechXact kicks-off the project by discussing and planning the project scope, expectations and timelines.
	Review Current Network Architecture – TechXact reviews and evaluates the current network architecture and the proposed security
	requirements, along with the solutions to be integrated into client’s network.
	Conduct Collaborative Working Session – TechXact conducts collaborative working sessions with the organization’s staff to understand and
	design security requirements and solutions into its network architecture design.
	Design Recommended Network Architecture – TechXact analyzes information gathered and designs a detailed security architecture plan for
	integrating protection products into the organization’s environment.
	Create Detailed Architecture Documentation – TechXact creates detailed network diagram of the recommended network architecture.
	Document Requirements for Supporting Network Architecture - TechXact provides specific hardware and software requirements for
	implementation of the recommended protection solutions.

System Scanner:	Database Scanner:	Wireless Scanner:
The System Scanner application ensures policy compliance and detects vulnerabilities that leave servers opens to compromise. System Scanner measures, manages and enforces security policies across a wide range of operating systems through a unique, server-to-network view of critical systems and servers. System Scanner's methodology simplifies the creation of system security baselines for users, groups, shares, services and critical system files, and easily fits with existing business processes..	The Database Scanner application assesses online business risks by identifying security exposures in leading database applications. Database Scanner offers security policy generation and reporting functionality, which instantly measures policy compliance and automates the process of securing critical online business data. Easy to install and use, Database Scanner runs independently of the database and quickly generates detailed reports with all the information needed to correctly configure and secure databases.	Internet Security Systems’ Wireless Scanner application provides automated detection and security analyzes of mobile networks utilizing 802.11b WLAN (Wi-Fi) access points and clients. This unique, cost effective mobile platform protects mobile extensions of traditional networks by deploying a single device to roam unobtrusively across a site and identify unauthorized and misconfigured devices.

AntiVirus

TechXact has designed the ultimate defense against today's most menacing security threat. Stop unwanted programs from wreaking havoc on your business with the industry's one and only business-grade anti-virus. This best-in-class product utilizes advanced scanning to proactively block unwanted programs that steal passwords, transmit sensitive data, corrupt systems, slow Internet access and proliferate irritating pop-ups.

The world’s premier virus detection and cleaning solution and delivers comprehensive, non-intrusive anti-virus protection against viruses, Worms, Trojans and other malicious code.TechXact is constantly enhancing its products to make them even more attractive for its customers. TechXact’s best-of-breed anti-virus products safeguard your extended enterprise network, with comprehensive, multi-tiered protection for literally every system – from desktops, file servers, email servers and Internet gateways to remote and wireless devices.

Integrating elements of intrusion prevention and firewall technology into a single solution for PCs and file servers, TechXact’s have taken anti-virus protection to the next level. This powerful combination delivers truly proactive protection from the newest of today’s threats—including buffer-overflow exploits and blended attacks—and features advanced outbreak management responses to reduce the damage and costs of outbreaks.

Features:

	Scans your computer completely and provides reports of any viruses that it finds
	Checks for all illegal dialers that are present on your computer and informs you of the same.
	Informs you of any background illegal sniffers or tools like spyware, adware, keyloggers etc. running in the memory of your computer.
	You can add this utility to the startup list of programs on your computer so that it scans your computer every time you start using it.
	When you download this utility you will get it with the latest updated list of viruses so that it scans your computer for all known viruses.
	No need to install. Just download and run the product to scan for viruses.
	TechXact also provides multi-language support.

Key Benefits:

	Products Integrated firewall and IPS technology – Addition of firewall and intrusion prevention technology delivers maximum proactive protection
	in a single, integrated package
	Enhanced coverage for emerging threats – provides protection from the newest potentially unwanted program security threats application-specific
	buffer overflow attacks, and blended attacks
	Lowered TCO during outbreak response – Advanced outbreak functionality closes the window of vulnerability before DAT files are available,
	limiting damage by blocking the entrance and spread of the outbreak
	Centralized management and reporting –provides a complete security management solution, including detailed graphical reporting, from a single console

Virtual Private Network (VPN)

Business evolves quickly, and your IT infrastructure is evolving with it. In fact, business change is happening faster than many security organizations are capable of adapting to it. New applications such as Voice over Internet Protocol (VoIP) and instant messaging are forcing change. Also, new business requirements such as regulatory compliance and obstacles to business continuity must be dealt with—not to mention the new attacks that threaten your network. Your choice? Slow down business until security can catch up or expose your network to the risk and liability of attack.

TechXact’s VPN security gateways provide an active defense that enables you to secure your network without slowing down IT business evolution. Designed as a core element of unified security architecture, VPN adapts as new applications are introduced and new threats appear—delivering proactive protection for new technologies such as VoIP or instant messaging and against whole classes of attacks. With advanced security acceleration technology, VPN ensures that your business information flows efficiently without compromising security. The result is an integrated firewall, VPN, and intrusion prevention solution that keeps your business safe and your information available.

Providing an Active Defense Against Threats:	VPN Connectivity with Total Security:	High Performance and Availability:
TechXact VPN solutions protects against next-generation threats and attacks by providing truly integrated security based on FireWall and intrusion prevention technologies. FireWall and Intrusion prevention cooperatively work together as if they were a single application—the effort needed to combat today’s blended threats. FireWall is based on Stateful Inspection, the de facto standard for Internet security. It understands the context of network traffic and provides out-of-the box support for more than 150 predefined applications, services, and protocols such as Citrix, Oracle, Web conferencing, and more. Because it is extensible, FireWall quickly adapts as new applications that need to be secured appear on your network. Intrusion prevention uses technologies to understand how applications and protocols should work. With this knowledge, intrusion prevention can preemptively block entire classes of attacks based on suspicious behavior. You stay protected as new variants appear—without the need for signature updates that do not appear until after the threat has done its damage.	Because organizations are dealing with increasingly complex virtual private networks, TechXact VPN solutions contains a comprehensive set of technologies for remote access and site-to-site VPNs that simplify configuration while still maintaining flexibility for disparate deployment scenarios. A key component that reduces your complexity is the integrated certificate authority found in VPN. Used to provide instant strong authentication for IPSec VPNs, the integrated certificate authority can automatically issue standards-based certificates to new gateways or remote users.	As firewall and VPN deployments deal with more mission critical applications, performance is a key concern. A TechXact VPN solution delivers accelerated security of more than 10 Gbps on an open server, guaranteeing the availability of information without compromising security. VPN security gateways enable you to get maximum performance from open servers and appliances. VPN uses advanced streaming technologies that allow packet processing to be performed at the kernel level, significantly improving network- and application-layer inspection, typically a computing-intensive task

TechXact Advanced Enterprise Security Box

Tools used to protect enterprise networks such as firewalls, IDS and VLANs are not sufficient or are not ideally suited to security problems such as theft of information and other various attacks, even if they have automated updates or security patches

A pro-active, all-in-one solution

TechXact Advanced Enterprise Security Box R&D laboratory, working closely with its intrusion and IS audit experts, has designed and produced an "all-in-one" product capable of dealing with all of these problems.

The first ever smart protection, capable to dealing with all threats thanks to its M.A.P. technology (Malicious Activity Protection).

Thus, before any damage, TechXact Advanced Enterprise Security Box is capable to block any type of suspect activities on a computer where the agent is installed. Henceforth, the company has the possibility of working out a true strategy of defense. This strategy can be implemented at a global level - in other words for all of your colleagues, at a department level or on an individual basis. Whatever the number of employees, is capable of retrieving all users' data within your LDAP or Active Directory. If your security approach is different from your organizational approach, TechXact Advanced Enterprise Security Box can adapt to your specific features.

Main Features:

Monitor computer usage. TechXact Advanced Enterprise Security Box allows you to maintain your company's security policy.
Detects port scanning attempts, even discreet ones, on TechXact Advanced Enterprise Security Box client PCs
Real-time detection and quarantine of suspect applications and processes

Benefits:

	Instantly blocks all types of unknown attacks: viruses, worms, network intrusion, web-consultation intrusions
	Identifies connections from a suspect workstation on your network
	Protects your IT base's integrity during holding phases for antivirus or security patch updates (zero day)
	Checks the integrity of each workstation or TechXact Advanced Enterprise Security Box client server.
	Allows partitioning of access to various servers without using complicated and costly VLANs
	Enables authorizing or prohibiting of access to Intranet, Extranet or Internet servers whose content is considered confidential, contrary or
	non compliant with your enterprise's policy
	Avoids data leakage by controlling the use of removable media (floppy, CD-ROM, USB key, external hard drive, printer) as well as the
	use of WebMails and instant messaging (MSN, ICQ, Yahoo Messenger, IRC, etc...)
	Stops users from modifying their workstation configuration, registry database, task manager, the use of DOS sessions, access to multi-boot,
	installing applications other than those listed by the administrator
	Secure remote control of workstations from the console (option)
	Proactive Solution. Does not require any updating

TechXact Advanced Enterprise Security Box Appliance

As today’s’ networks encounter threats that are increasingly sophisticated and frequent, new security solutions have become more complex and difficult to mange. A unified security solution is needed to protect your business’ network perimeter. TechXact Advanced Enterprise Security Box delivers much needed relief. Powered by proven Open Source security modules and shielded by the award winning antivirus, this unified threat management (UTM) appliance detects and eliminates zero-day threats at the gateway, well before your network is exposed.

The single device includes:

SSL/IPSec VPN for your remote workforce or site-to-site connectivity
Content Filtering
Stateful Firewall
Intrusion Detection/Prevention
Antispam
Antispyware
Antivirus
Advanced Proxy
Routing
Mail Relay Functions

All this standard functions are at your command from a simple Web interface. Optional High Availability increase network robustness and lower deployment cost.

Installed behind the router, TechXact Advanced Enterprise Security Box provides a smart hardware solution capable of blocking all types of threats. This product involves administrating and supervising security outside of your information system. It combines all protection functions available on the market.

A Comprehensive and Unmatched Tool

TechXact Advanced Enterprise Security Box acts as a customs check-point to control entry to your network. Your security policy is the legislation governing what enters and leaves from one country to another. "TechXact Advanced Enterprise Security Box " will therefore check all data flows (POP, HTML, FTP, etc.) adapting itself according to the specific control technology and blocking technology (Antivirus, Antispam, Firewall, etc.).

Aadaptable and Scalable
All parameters can be set on TechXact Advanced Enterprise Security Box in line with your security approach. It includes various tools which enable real-time configuration, analysis and control of the input and output checkpoints in your network.

Main Features:

Multi-engine antivirus: detection, blocking and eradication of viruses and worms before they propagate throughout your company
Antispam: eradicating unwanted emails before they overload your messaging servers.
Firewall: Blocking hacking attempts and intrusion alerts (IDS)
Restricting access to non-professional sites by a user or group of users
Anti-hackers decoy system
Network Supervision