Skip navigation

New Dashboard Widgets Enable Users to Customise Attack Monitoring to Focus on Critical Assets and Threats

Wokingham, UK – 22nd April, 2008 – Open source innovator and SNORT® creator, Sourcefire, Inc. (Nasdaq: FIRE), a leader in Enterprise Threat Management, today announced the latest version of the Sourcefire 3D™ System, continuing the company’s tradition of delivering innovative solutions that enable customers to improve security while reducing management requirements. Sourcefire is positioned in the leaders quadrant of the recent Gartner IPS Magic Quadrant*. The company is extending its leadership with the Sourcefire 3D System 4.8, providing users with a new customisable, role-based Dashboard and superior automation.

“As threats become more sophisticated, security solutions need to balance powerful protection with simplified management if they are to be truly effective,” said Martin Roesch, Founder and CTO of Sourcefire. “Sourcefire leads the industry in delivering innovative solutions that address complex threats while removing much of the manual administrative burden from the end-user. With the 3D System 4.8, we are providing customers with powerful protection combined with unparalleled automation and customization that make it easier to defend the network against today’s dynamic threats.”

Customizable, Role-Based Dashboard

The 3D System 4.8 release features an enhanced Dashboard interface providing users with an easy-to-use, portal-like experience for monitoring security and compliance events. This highly customisable Dashboard is equipped with a library of more than two dozen drag-and-drop “Widgets” for monitoring IPS events, compliance violations, 3D Sensor performance, licence usage, and version information. It also includes an RSS Feed Widget for receiving security bulletins from Sourcefire, SANS, and other industry sources and a Top 10 Widget Builder for users to create new Widgets to monitor virtually any aspect of the Sourcefire 3D System.

Additionally, users can share configured Dashboards with colleagues having the same role within the organisation (e.g., security analyst, IPS administrator). Users can also view graphical trends over time and drill down within certain Widgets to view underlying raw data or navigate to relevant Defense Center interfaces, saving both time and effort.

Unrivaled Security Automation

Sourcefire’s groundbreaking Adaptive IPS technology leverages network intelligence aggregated by Sourcefire RNA™ (Real-time Network Awareness) to automate the process of enabling and disabling Snort rules based on the environment the IPS is protecting. With the 3D System 4.8, Sourcefire is extending its Adaptive IPS technology even further. First, the new Adaptive Traffic Profiles feature improves the security and effectiveness of the IPS by processing segmented and fragmented traffic in the same manner as the targeted host operating system. This prevents hackers from disguising attacks to circumvent the IPS. Second, the new Non-Standard Port Handling capability ensures that Snort rules are automatically configured to monitor traffic on both standard and non-standard ports in use on the network, further increasing the security and effectiveness of the IPS. Both new Adaptive IPS capabilities rely on 24x7, passive network intelligence afforded by Sourcefire RNA, and both capabilities enable the IPS to automatically adapt to the dynamically changing network.

In addition to new Adaptive IPS enhancements, Sourcefire has also automated the process of downloading, importing, and applying Snort Rule updates. Customers can now opt to apply the best intrusion prevention rules in the industry in their recommended state with or without human intervention.

Other Notable Features

The Sourcefire 3D System 4.8 also delivers a number of new features that enhance overall usability, ease the burden of regulatory compliance, and provide new IPS and RNA detection capabilities:

- Enhanced Compliance Capabilities – Enhances an organisation’s ability to achieve regulatory compliance by limiting administrative access to only certain roles, by enabling administrators to temporarily disable user accounts, and by displaying the last successful logon date and time after each successful logon.

- Improved Packet-Level Forensics – Sourcefire’s packet-level forensics enables users to gain a deeper understanding and validation of the source and nature of an attack. With 4.8, users now gain deeper application-layer insight (e.g., protocol, message type) that previously could only be obtained using third-party network protocol analysis tools.

- RADIUS Support – Enables customers to leverage their existing RADIUS investment to manage 3D System user accounts, eliminating the need for local Sourcefire user accounts. This saves significant administration time and effort and enables the use of third-party, two-factor authentication systems, such as RSA SecurID®”.

- GRE and BitTorrent Decoding – Provides customers with an additional level of protection by enabling the IPS to decode GRE (Generic Routing Encapsulation) traffic and RNA to decode BitTorrent peer-to-peer traffic.

- Usability Enhancements – Simplifies the process of installing and managing the Sourcefire 3D System. These enhancements include a streamlined Defense Center setup process, simplified backup and restore, rule view filtering, and more.

The Sourcefire 3D System 4.8 will be available in Q3 2008. For more information, please visit www.sourcefire.com.

About Sourcefire

Sourcefire, Inc. (Nasdaq: FIRE), Snort creator and open source innovator, is a world leader in Enterprise Threat Management (ETM) solutions. Sourcefire is transforming the way Global 2000 organisations and government agencies manage and minimise network security risks with its 3D Approach – Discover, Determine, Defend – to securing real networks. The Sourcefire 3D™ System is the first to unify IPS, NBA, NAC and Vulnerability Assessment technologies under the same management console. This ETM approach equips customers with an efficient and effective layered security defence – protecting network assets before, during and after an attack. Through the years, Sourcefire has been consistently recognised for its innovation and industry leadership by customers, media and industry analysts alike – with more than 30 awards and accolades. Today, the names Sourcefire and founder Martin Roesch have grown synonymous with innovation and network security intelligence.

For more information about Sourcefire, please visit http://www.sourcefire.com.

The Gartner Magic Quadrant is copyrighted February 2008 by Gartner, Inc., and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner’s analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the “Leaders” quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

The following product categories are represented by the acronyms: Intrusion Prevention System (IPS); Network Behavior Analysis (NBA); Network Access Control (NAC); Vulnerability Assessment (VA).

SOURCEFIRE®, SNORT®, the Sourcefire logo, the Snort and Pig logo, SECURITY FOR THE REAL WORLD™, SOURCEFIRE DEFENSE CENTER™, SOURCEFIRE 3D™, RNA™, DAEMONLOGGER™, CLAMAV™, SOURCEFIRE SOLUTIONS NETWORK™, and certain other trademarks and logos are trademarks or registered trademarks of Sourcefire, Inc. in the United States and other countries. Other company, product and service names may be trademarks or service marks of others.

# # #

Media Contact:

Paula Elliott
Managing Director
C8 Consulting Ltd
Tel: +44 (0) 118 9001132 / +44 (0) 7894 339645
Email: paula@c8consulting.co.uk

Investor Contact:
Tania Almond
Investor Relations Officer
Sourcefire, Inc
Tel: + 1 410 423 1919
Email: Tania.almond@sourfire.com

This press release was distributed by ResponseSource Press Release Wire on behalf of C8 Consulting in the following categories: Consumer Technology, Personal Finance, Business & Finance, Computing & Telecoms, for more information visit http://pressreleasewire.responsesource.com/about.