Risk
2/3/2014
01:47 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Catbird Integrates With Cisco Application Centric Infrastructure (ACI)

Catbird, with Cisco ACI integration, allows IT teams to stitch network security into ACI policy

Scotts Valley, CA--February 3, 2014--Catbird, the leader in security policy automation and enforcement for private clouds and virtual infrastructure, today announced a new partnership with Cisco. Revealed today on Cisco's blog, the partnership brings Catbird's policy-based security automation, evidence of control, and compliance enforcement capabilities to Cisco's Application Centric Infrastructure (ACI).

"ACI's policy-based approach to the physical and virtual network is a perfect complement to our policy-based network security approach for data center asset control and compliance enforcement", said Edmundo Costa, CEO of Catbird. "Catbird was built to secure SDN. The partnership with Cisco ACI will dramatically reduce the cost and complexity of compliance by ensuring that network security controls are delivered based on an application-based policy, in a flexible and elastic manner."

Within today's highly dynamic cloud data centers, assets and their network configurations are subject to change yet compliance continues to rely on manual processes lacking automation. Catbird, with Cisco ACI integration, allows IT teams to stitch network security into ACI policy, providing a highly standardized, automated approach to provisioning security as part of the network policy, through the asset lifecycle from asset inception to teardown. Catbird also delivers enterprise-wide visualization, workflow and reporting for assurance of control, continuous measurement, and enforcement, essential for complying with standards such as PCI, HIPAA and FISMA.

ACI's network and application view, combined with Catbird's asset-based network security policy automation and enforcement, will allow assets to be seamlessly protected through their entire lifecycle. Network security and compliance measurements are seamlessly integrated into the network fabric, providing customers with enterprise-wide visibility and data protection.

"SDN will transform network security and make hardware-based security obsolete" said Randal Asay, CTO for Catbird. "Network security and compliance policy attributes are delivered via integrated services, something that the hardware world only dreams about. Catbird provides an in-fabric, distributed approach that delivers security deep within the SDN infrastructure."

About Catbird

Catbird brings the power, agility and automation of the cloud to security policy and compliance, with a solution that automates, instruments and enforces policy while providing proof of continuous compliance. Customers rely on Catbird for managing cloud and virtualized infrastructure subject to compliance requirements including HIPAA, PCI-DSS, FISMA and SOX.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8142
Published: 2014-12-20
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys w...

CVE-2013-4440
Published: 2014-12-19
Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.

CVE-2013-4442
Published: 2014-12-19
Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.

CVE-2013-7401
Published: 2014-12-19
The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) via a URI without a " " or "?" character in an ICAP request, as demonstrated by use of the OPTIONS method.

CVE-2014-2026
Published: 2014-12-19
Cross-site scripting (XSS) vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.