Forescout’s ActiveResponse Technology Blocks A Myriad of Threats Including Flame
Munich, Germany — July 3, 2012 — Forescout Technologies, Inc., a leading provider of automated security control solutions for Fortune 1000 enterprises and government organisations, today announced that Mediengruppe Pressedruck, a leading publisher and information provider in Germany, has selected Forescout’s automated threat prevention solution, CounterACT Edge™, to protect its network from attacks and sophisticated malware, including Flame and Stuxnet. CounterACT Edge delivers behaviour-based intrusion prevention without requiring signatures and constant tuning.
Based on Forescout’s patented ActiveResponse™ technology, CounterACT Edge can reliably identify and actively preempt propagating malware, zero-day threats and targeted attacks. The field-proven, behaviour-based approach incorporates an automated virtual intranet generation (like a honey-pot), marker defence system and malware-monitoring system to detect the malicious intent of new and targeted attack patterns at an early stage, before they impact operations.
“Forescout’s CounterACT Edge allows us to manage the risk of zero-day and targeted attacks on our network without incurring headcount, maintenance and expertise overhead of traditional intrusion systems,” said Andreas Neutatz, Network Manager of Mediengruppe Pressedruck. “The appliance was the only one we assessed that would provide us with the level of advanced threat protection with the least affect on IT resources. In addition, CounterACT Edge’s clear interface and automated functionality made our choice that much simpler. In comparison, the two other intrusion prevention systems (IPS) we evaluated were cumbersome to set up and maintenance would have required too much administrative effort.”
Pressedruck’s installation of CounterACT Edge took only one hour to complete, without requiring network changes or interruption of service. The Edge appliance sits out-of-band, outside the corporate firewall so it acts as an advanced perimeter defence in conjunction with a firewall/IPS. As CounterACT Edge automatically discovers the real network, its ActiveResponse technology generates and maintains a virtual, auto-defended intranet used for active defences rather than for research and forensics.
Oded Comay, co-founder and CTO at Forescout, commented, “Solely relying on signatures and reputation lists are not enough to preempt targeted or zero-day attacks. To be proactive, organisations need to reduce their vulnerability footprint and leverage automated behaviour-based defences. With minimal administration, Forescout’s ActiveResponse technology continues to protect our customers throughout Europe, and worldwide – thwarting intrusions and numerous Conficker, Zeus and Flame derivations.”
Since initial deployment, the Forescout appliance monitors Mediengruppe Pressedruck’s network across 70 servers in two data centres, including their databases, content and mail infrastructure. CounterACT Edge has detected and stopped over 4,000 Internet attacks each week for the company while providing a report of the attacks. More recently, the company was relieved to have zero-day defences against the Flame zero-day malware. Flame (also known as sKyWIper) is a complex new malware that looks for vulnerable services on a network and uses some of the same propagation techniques used by Stuxnet. Forescout’s ActiveResponse technology, on which CounterACT Edge is based, can block zero-day malware propagation techniques. More details can be found at: //www.forescout.com/blog/bid/141813/Protect-your-network-against-Flame-with-Forescout-CounterACT
About Forescout Technologies, Inc.
Forescout enables organizations to accelerate productivity and connectivity by allowing users to access corporate network resources where, how and when needed without compromising security. Forescout’s automated solutions for network access control, mobile security, endpoint compliance and threat prevention empower IT agility while preempting risks and eliminating remediation costs. Because the Forescout CounterACT platform is easy to deploy, unobtrusive, intelligent and scalable, it has been chosen by more than 1,300 of the world’s most secure enterprises and military installations for global deployments spanning 37 countries. Headquartered in Cupertino, California, Forescout delivers its solutions through its network of authorized partners worldwide. Learn more at www.forescout.com.