Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Perimeter

3/20/2009
05:22 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Netronome Enhances SSL Inspector Appliance

New features aimed at preventing the latest generation of exploits created by the expanded use of encryption

PITTSBURGH, PA " March 18, 2009 " Netronome Systems, Inc., a leading developer of high-performance flow processing solutions that provide content analysis, deep packet inspection and application acceleration for network and security appliances, today announced a series of enhancements for its SSL Inspector Appliance, aimed at preventing the latest generation of exploits to disrupt enterprise security and compliance created by the expanded use of encryption. Documented at BlackHat' DC 2009, tools such as Metasploit, SSLsniff and SSLstrip expose a series of newly publicized vulnerabilities to SSL/TLS encryption - the most common method used for securing Internet applications, services and transactions.

Used for more than simple transactions containing credit card numbers and passwords, encryption is increasingly required for compliance, privacy and security by network-based applications and services for the enterprise, and personal communication tools for users. Many enterprises are also burdened with unauthorized applications that avoid traditional detection and prevention solutions by operating on non-standard ports and masking content with encryption.

This necessary increase in the use of encryption creates significant problems for security architects. Often, they lack the awareness of, and visibility into, encrypted communications, which results in increased exposure to attacks along with undetected violations of acceptable use and compliance policies. Further, inadequate management and control of encrypted communications places the security of information at greater risk by creating opportunities for phishing and man-in-the-middle attacks. Finally, even when encryption is being used as intended, it serves as a carrier for both outbound data leaks and inbound attacks, such as viruses, spam, worms, malware and botnets.

With the new version of the SSL Inspector Appliance, the industry's highest-performance transparent SSL proxy now addresses the issues that make these threats possible by offering:

An enhanced SSL Session Log which provides a precise audit of all encrypted communications, including the necessary visibility required to regain control of the security architecture. An SSL Inspection Policy engine which provides a single location for administration and enforcement of the acceptable uses of encryption, such as authorized sites and servers. Additionally, centralized control over certificate management ensures that self-signed and other low-assurance certificates do not enable phishing and man-in-the-middle attacks. An expanded list of leading encryption protocols, algorithms and ciphers which deliver 1Gbps of plaintext to valuable security appliances, such as IDS, IPS and DLP systems, that are unable to detect and control threats hidden within encrypted communications. Expanded design options which allow for in-line and tap-port configurations that identify and decrypt communications on well-known and non-standard ports, guaranteeing that all SSL traffic is controlled and scrutinized.

"In light of a series of highly publicized tools that expose threats to enterprise security and compliance, the increased use of encryption has captured the attention of security architects," said Jarrod Siket, senior vice president of sales and marketing at Netronome. "In spite of all of the obvious benefits that encrypted communications bring to enterprise security, when not properly managed, these new applications serve as the most efficient cloaking mechanism for both outbound data leaks and inbound attacks."

About Netronome Systems Netronome is a leading developer of highly programmable semiconductor products that are used for intelligent flow processing in network and communications devices. Netronome's solutions include tightly integrated network flow processors and acceleration cards that scale to more than 20Gbps. They are used in carrier-grade and enterprise-class communications products that require deep packet inspection, flow analysis, content processing and security. Netronome is headquartered in Pittsburgh, PA, with core operations in San Jose, CA and Boxborough, MA, and international locations in the United Kingdom, China and South Africa. To learn more about Netronome and its products, please visit www.ssl-inspector.com or www.netronome.com.

Danielle Tarp Mindshare PR 650.947.7405 [email protected]

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
How to Better Secure Your Microsoft 365 Environment
Kelly Sheridan, Staff Editor, Dark Reading,  1/25/2021
Attackers Leave Stolen Credentials Searchable on Google
Kelly Sheridan, Staff Editor, Dark Reading,  1/21/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today's Enterprises
Assessing Cybersecurity Risk in Today's Enterprises
COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-4682
PUBLISHED: 2021-01-28
IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509.
CVE-2020-4888
PUBLISHED: 2021-01-28
IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker co...
CVE-2020-13569
PUBLISHED: 2021-01-28
A cross-site request forgery vulnerability exists in the GACL functionality of OpenEMR 5.0.2 and development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce). A specially crafted HTTP request can lead to the execution of arbitrary requests in the context of the victim. An attacker can...
CVE-2021-20620
PUBLISHED: 2021-01-28
Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
CVE-2021-20621
PUBLISHED: 2021-01-28
Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.