Story image

Aruba extends focus on network security and behavioural analytics

19 Sep 17

Networking solutions provider Aruba has extended its reach into the security market by fusing together network security with User and Entity Behavioural Analytics (UEBA), monitoring and attack detection.

Aruba cites Gartner research which found that organisations don’t have the tools necessary to defend against insider threats, despite more being interested in dealing with the issue.

The company developed its 360 Secure Fabric to deal with these security gaps, and to give IT teams a way to quickly detect and respond to advanced cyber attacks.

The solution, contains Aruba IntroSpect UEBA, its family of continuous monitoring and advanced attack detection software.

IntroSpect Advanced Edition delivers a wide range of attack capabilities including more than 100 supervised and unsupervised machine learning models for security analytics, ClearPass functionality for classifying devices and fast remediation.

The newest addition to the IntroSpect solution, Aruba IntroSpect Standard, includes machine learning to detect changes in user and device behaviour that could potentially indicate a cyber attack. The machine learning algorithms also create a risk score on attack severity so that IT teams can prioritise their responses.

The company says IntroSpect Standard is designed for basic monitoring and detection of anomalous activity across network, mobile, cloud, IoT devices and applications. It also fuses common data sources including Microsoft Acrive Directory, Check Point, Palo Alto Networks and Aruba monitoring logs.

“With the forthcoming Palo Alto Networks Application Framework, which will revolutionise how organisations consume security technologies, joint customers will be able to evaluate and adopt solutions like Aruba IntroSpect without deploying on-premises infrastructure,” comments Chad Kinzelberg, senior vice president of business and corporate development, Palo Alto Networks.

Major security firms including Check Point and Palo Alto Networks are included in the Aruba 360 Security Exchange Program, which combines channel partners and technical resources from the IntroSpect Technology Program and the Aruba ClearPass Exchange Program.

Customers and channel partners are able to leverage 100 solutions to manage deployments.

Aruba ClearPass is a network access control and policy management solution that is able to profile BYOD and IoT users and devices.

Aruba Secure Core includes capabilities embedded in Aruba’s WiFi access points, wireless controllers and switches.

Aruba has also embedded its Secure Core into its networking infrastructure which provides secure boot, embedded firewalls, centralised encryption, deep packet inspection and intrusion prevention.

Aruba plans to launch the solutions in the A/NZ market in early 2018.

Cylance makes APIs available in endpoint detection offering
Extensive APIs enable security teams to more efficiently view, enrich, and contextualise real-time intelligence collected at the endpoint to keep systems secure.
SolarWinds adds SDN monitoring support to network management portfolio
SolarWinds announced a broad refresh to its network management portfolio, as well as key enhancements to the Orion Platform. 
JASK prepares for global rollout of their AI-powered ASOC platform
The JASK ASOC platform automates alert investigations, supposedly freeing the SOC analyst to do what machines can’t. 
Pitfalls to avoid when configuring cloud firewalls
Flexibility and granularity of security controls is good but can still represent a risk for new cloud adopters that don’t recognise some of the configuration pitfalls.
Securing hotel technology to protect customer information
Network security risks increase exponentially as hotels look to incorporate newer technologies to support a range of IoT devices, including smart door locks.
Why total visibility is the key to zero trust
Over time, the basic zero trust model has evolved and matured into what Forrester calls the Zero Trust eXtended (ZTX) Ecosystem.
Gartner names Proofpoint Leader in enterprise information archiving
The report provides a detailed overview of the enterprise information archiving market and evaluates vendors based on completeness of vision and ability to execute.
Tensions on the rise after Huawei CFO arrest
“Recently our corporate CFO, Meng Wanzhou, was provisionally detained by the Canadian authorities on behalf of the United States of America."