Network Security

UTM / NGFW řešení

UTM (Unified Threat Management) is a solution that integrates multiple security technologies previously used as standalone solutions. It is the all-in-one device with integrated features - firewall, VPN, IDS/IPS ( detection and prevention of penetration ), antivirus, antispam, antispyware, filtering website content and tools for monitoring activity within the network. Společnost CISCO as a major supplier of UTM / NGFW (Next-Generation Firewalls) offers a solution in the form of a special HW, appliance - Cisco ASA, Firepower NGFW, Cisco Meraki MX, but also the software version Cisco Adaptive Security Virtual Appliance (ASAv).

Cisco® Meraki MX Security Appliance

Meraki Security Appliance is a cloud-controlled application state security gateway, featuring advanced firewall, IPS, CIPA content filtering and SafeSearch, Anti-Virus, Auto VPN, and Advanced Malware Protection. The appliance makes user and device control, L7 application layer inspection. 

A rapid response to new security threats is ensured by continually updating the signatures of the cloud threats. Centralized cloud management (web Meraki Dashboard) enables fast deployment of the device. Depending on the defined templates, security policies are automatically distributed to the assigned devices. More+

I can’t manage what I can’t control

Merely setting up a perimeter wall with fast and regular signature updates is no longer enough to protect against modern types of threats. Identifying risk and non-standard behaviour in data applications and systems properly and well in advance can minimise the potential threat to your business network.

Anomaly detection and analysis of data network behaviour by monitoring data flows are essential aspects of modern security management in ICT. In our projects we most often make us of the benefits, comprehensive approach and the technological advancement of Flowmon.

Detection of Incidents and Anomalies

Flowmon ADS automatically identifies various security and operational  issues,  network  anomalies  or  undesired  user behavior:

Attacks on network services aiming to gain unauthorized access to host and services.

• Infected devices and communication with malicious IPs and hosts including botnet command and control centers, known attackers or systems spreading SPAM or malware based on advanced real-time reputation databases.
• Anomalies of DNS and DHCP traffic.
• Detection of network services potentially being used to generate Distributed Denial of Service (DDoS) attacks.
• Port scanning performed by compromised devices, attackers or malevolent internal users.
• Detection of proxies, TOR(The Onion Router) used to hide network activities.