Welcome Guest. | Log In | Register | Membership Benefits

Athena Releases PathFinder For Predictive Network Analysis

Athena PathFinder imports configurations from network security devices to create an offline model of access policy across the network

Mar 07, 2011 | 10:54 AM | 


March 7, 2011 -- Chicago, IL -- Athena Security, makers of the advanced network security analytics solution, Athena FirePAC, today announced a new product that extends the core analysis from a device-centric view to a network-based view. The Athena PathFinder product is a comprehensive and powerful tool that maps the relationships between firewall configurations, critical assets and the network infrastructure. It shows what services are available across the network and what paths they will traverse across multiple devices. Using the PathFinder, network security engineers can perform predictive topology path analysis to conduct more effective firewall troubleshooting and to find the optimal places to make rule changes.

The PathFinder imports configurations from network security devices such as firewalls, routers and switches to create an offline model of access policy across the network. PathFinder automatically determines the connections between devices, and the resulting topology diagram allows users to initiate queries from any source to any destination. The model constructed by PathFinder predicts what is reachable and how configuration settings will control traffic.

"Firewall configurations cause extremely complex rule and device interactions that are not easy to troubleshoot by simply injecting data packets in the network,” said David Hurst, CTO of Athena Security. “The beauty of an offline model is that a single query can determine all possible paths and devices where data can travel. It will also identify precisely which firewalls and which rules should be changed to impact traffic behavior".

PathFinder is based on patented technology developed by Athena Security and was evolved to offer security operations groups a focused, clean and highly interactive user experience. It is a handy tool that can be downloaded and installed in minutes. Additional new features include:

Quick creation of topology diagram by one-step connections to adjacent nodes in the diagram. This includes an ability to find adjacent nodes in the inventory that are not in the diagram and place and connect them in the diagram.

Ability to specify the source, destination and service parameters for a node to node query.

Ability to save topology diagram in different image formats like GIF, BMP, JPEG, JPG and SVG etc. This allows users to repurpose, print and share the diagrams with team members.

A new Packet Tracer option provides the ability to inject a virtual packet, specified as source, destination, and service, into a selected subnet in the topology. PathFinder analyzes the routes from the selected subnet to determine where the packet should end up and then identifies how ACLs and NATs along the path would affect the packet. The specific devices allowing or denying the packet along the path are identified and highlighted on the diagram. You can drill down into the device configurations to see precisely the effect of each rule acting on the packet.

Athena’s PathFinder is available immediately. Licensing is based on the number of devices selected for topology modeling. The product currently supports the following:

Cisco Security Appliances: PIX, ASA(up to version 8.3), FWSM

Cisco IOS routers: Version 12.0 to 12.14, excluding X* Series.

Juniper firewalls: Netscreen, SSG, ISG

Check Point™ products: SmartCenter NG/NGX, Security Management R70

Check Point™ platforms: SecurePlatform, Check Point IPSO (formerly Nokia), Crossbeam, Linux, Solaris

Support for additional device types and vendor platforms are released on a frequently updated basis.

For more information, please see http://www.athenasecurity.net/.

About Athena: In a world where controlling technology costs are paramount, Athena is the only solution provider to offer enterprise firewall analytics and remediation in a collection of focused tools. Customers configure Athena FirePAC towards requirements that are specifically operations, security or compliance-oriented and pay only for what is needed. With a global customer base of several hundred Banking, Insurance, Retail, Healthcare, Energy, Utilities and US Federal Sector enterprises and thousands of users across a suite of products, Athena is constantly innovating the range of solutions it offers to drive more intelligent firewall and network management. From data center migration to policy optimization, Athena aims to be the most affordable and flexible choice for network and security engineers. For more information see http://www.athenasecurity.net/.



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS



Security Monitoring Reports

report Fundamentals of User Activity Monitoring
Benchmarking normal activity and then monitoring for users who stray from that norm is an essential strategy for getting ahead of potential data and system breaches. But choosing the right tools is only part of the effort. Without sufficient training, efficient deployment and a good response plan, attackers could gain the upper hand.

report Does SIEM Make Sense For Your Company?
A security information and event management system serves as a repository for all the security alerts and logging systems from a firm's devices. But this can be overkill for a company that is understaffed or has overestimated its security information needs. In this report, we discuss 10 questions to ask yourself in determining whether SIEM makes sense for you--and how to pick the right system if it does.

report Monitoring Tools and Logs Make All The Difference
It's no longer a matter of "if" you get hacked, but when. In this special report, we take a look at ways to measure your security posture and the challenges that lie ahead with the emerging threat landscape.

Other reports from the Security Monitoring Tech Center:

Related Content

Security Management 2.0: Time to Replace Your SIEM?
Is it time? Are you waving the white flag? Has your first gen SIEM failed to meet expectations despite your investment? If you are questioning whether your existing product or service can get the job done, you are not alone. Read this Securosis white paper to learn how easy it can be to replace your SIEM with a next generation solution.

IT Executive Guide to Security Intelligence: Transitioning from SIEM to Total Security Intelligence
Read this whitepaper to learn how adopting a next generation SIEM solution provides security intelligence, to allow organizations to maintain comprehensive and cost-effective information security. Discover how security intelligence enables critical concerns in five key areas: Data silo consolidation, threat detection, fraud discovery, risk assessment/risk management, and regulatory compliance.

The Return on Security of QRadar: Improving Operational Efficiencies in Federal Government
In this study, IANS interviewed two Q1 Labs customers using QRadar to assess their Return On Security (ROS). The two customers were providers of service to the U.S. Government and had highly secure environments dealing with extremely sensitive data. The data yielded from the interviews showed substantial benefit to the organizations for the cost, both in money and staff time.

SANS What Works Webcast: Worldwide Retailer Boosts Privacy with Security Intelligence
A leading retailer with stores worldwide was seeking a more innovative tool to protect customer privacy and intellectual property. PCI compliance mandated log collection, but a vast number of different tools generated an overwhelming amount of log data, making it difficult for the small security team to review it effectively. The solution the company chose had to fit into a diverse network, provide intelligent reporting and offer a centralized management console.

Learn How Security Intelligence Can Help Combat WikiLeaks Stuxnet and Advanced Threats
WikiLeaks and Stuxnet have illustrated a few fundamental IT security issues that have underscored the need for Total Security Intelligence to counter advanced threats and to detect anomalous behavior. See how government and commercial organizations are using QRadar as an integral component of their IT security program to identify emerging threats based on context and situational awareness.




Featured Webcasts
Featured Whitepapers
Featured Reports