Cisco ratchets up self defending network

In a move that signals rapid convergence of security into the network fabric, trend-setter Cisco has moved one big, bold step closer to its Self Defending Network vision by launching key components of its Adaptive Threat Defense initiative.

The new solutions utilize existing network and security infrastructure to help protect existing business investments and include:

1. Cisco Incident Control System (ICS);
2. Distributed Threat Mitigation for Intrusion Prevention Systems (IPS);
3. Enhancements to Cisco IPS and IOS software.

These extensions to the Cisco Self-Defending Network security strategy and product portfolio aim to deliver real-time threat response based on internal and external network threat intelligence.

ICS is a collaboration with Trend Micro TrendLabs who will provide Cisco ICS customers with current information on virus outbreaks and virus signatures. That information is designed to enable users to automatically configure their IPS, routers and switches to block the threats before they reach the core network assets.

DTM for IPS is designed to let users identify, manage and eliminate attacks that are locally based. The feature is part of add-ons to the Cisco Security Monitoring Analysis and Response System (CS-MARS) version 4.1. With its new product, Cisco's IPS appliance sensors detect threats, and then the Monitoring, Analysis and Response System version 4.1 distributes the information across the network to Cisco IPS-enabled routers to block the threat.

New versions of the Cisco IPS version 5.1 and Cisco IOS Software Release 12.4(4)T offer improved outbreak prevention capabilities for IPS, Routers and Switches to participate in ICS and DTM as described above.

Cisco's approach is a broad inter-related one and to deploy the benefits of Adaptive Threat Defence is non-trivial and going to require some heavy Proffessional Services, upgrades and planning on behalf of customers.

CATEGORIES: 1vendor, 1announcement, 1convergence