Lumeta IPsonar - The Phases of Discovery

The Phases of IPsonar Discovery

IPsonar actively scans the network to collect all data related Network,Host, Leak, and Device Fingerprint Discovery.Users can accurately visualise what is on the network, drill down to analyse potential areas of risk, and identify appropriate corrective actions.

Network Discovery
Organisations must understand the entire network during times of change, assuring that all assets are under management to avoid intrusion and service outages. For that reason, IPsonar identifies and measures relationships between known and previously unknown network assets, including connections, routers, and firewalls. The solution:

Applies multi-protocol discovery to penetrate deep into the network, identifying forwarding and filtering devices
Traces data paths through a network, to see if assets communicate properly
Flags “stealth” assets that do not respond to queries, pinpointing resources that may not be under management
Isolates the impact of firewall and router access control lists (ACLs), assuring they are operating in compliance to policy
Provides a route-based network topology from an application connectivity perspective

Host Discovery
Unknown IP addresses exist in every large network, often undiscovered until an outage, breach, or audit issue results. IPsonar reveals all network addresses, helping IT executives align areas of visibility with areas of responsibility. The solution:

Conducts a census of all IP addresses using multi-protocol discovery, identifying the true perimeter of the network
Flags addresses unrecognised by official network inventories for remediation
Enables organisations to harden defenses around the network perimeter an secure zones to enforce policies

Leak Discovery
Leaks are devices with unauthorised inbound or outbound connectivity to the Internet or sub-networks (e.g., unsecured routers exposed to the Internet or open links to former business partners).The more complex a network, the more likely it is that leaks exist. IPsonar is crucial in the proactive fight against leaks, revealing all unauthorised connections and identifying whether access is outbound, inbound, or both. The solution:

Pinpoints forwarding and filtering devices, enabling IT staff to assure these resources are in compliance with security policies
Flags inbound and outbound connectivity to secure zones, such as those developed to protect customer data or carry sensitive communications
Identifies resources a “hop” beyond the network, showing executives to which organisations they are connected
Spots hard-to-find leaks such as unauthorised cable/DSL routers,multi-homed servers, and NAT/PAT proxies that covertly forward network traffic

“Lumeta has been in production at the bank for several years, and we continue to add licenses as we build out our infrastructure or add devices due to M&A activity.The data and capabilities that Lumeta provides are critical for maintaining the security and integrity of our enterprise network.

One of our goals is to keep Wachovia out of the newspapers by ensuring that we do everything we can to protect our customers' data.”
– Peter Makohon, VP of Corporate Information Security, Wachovia Corporation

back

“Since Brookcourt came into the picture, we have experienced many benefits. Most notably, they provide us with a broader vision of options for technology and solution to meet the needs of our campus environment. The team from Brookcourt is helpful, professional and competitively priced. Simply stated, they’ve been brilliant!” Colchester Institute - Elearning Network Manager ”Our business has grown dramatically and Brookcourt Solutions has been able to scale their support accordingly. We have found the team to be extremely responsive and dependable, and their professionalism and knowledge has made them a true business partner." The Hospital Group - IT Support Manager "Since Brookcourt came on board, they have provided proactive account management and have proved willing to offer advice for the development of the service provided by Pace's IS function." Pace Petroleum - Manager, Information Services

© Copyright 2005. Brookcourt Solutions Ltd	Privacy