ComWise Internetwork Sdn Bhd

F5 Shakes Up the Firewall Market

admin — Fri, 03 Feb 2012 02:54:46 +0000

The high-end of the firewall market has really been dominated by two companies: Crossbeam Systems (with Check Point Software) and Juniper Networks. Over the past few years, these two firms won most of the high revenue/high margin enterprise and service provider deals.

Of course, others took notice and wanted their own piece of the pie. Cisco came out with its ASA 5580 a few years back. Network security guru Sourcefire introduced a high-end hardware architecture and a firewall in 2011. Finally, Check Point jumped in with its own high-end hardware as well.

As if this space wasn’t crowded enough, F5 Networks threw its hat in the ring this week with the announcement that its Big-IP 11.1 software passed the ISCA Labs test for network firewalls.

This may seem like just another feature for Big-IP but it’s not. F5 has a unique position amongst its competitors because:

A detailed look at security audit options for Solaris

admin — Fri, 03 Feb 2012 02:03:08 +0000

A detailed look at security audit options for Linux

admin — Fri, 03 Feb 2012 02:01:30 +0000

IBM InfoSphere Guardium Introduction Video

admin — Fri, 03 Feb 2012 01:48:30 +0000

Cybersecurity Report Stresses Need for Cooperation

admin — Thu, 02 Feb 2012 01:23:26 +0000

As they grapple with a growing crop of increasingly sophisticated threats that know no political borders, nations must dramatically improve their framework for coordinating on cybersecurity policy and preventing and responding to attacks, according to a new study sponsored by security software vendor McAfee.

McAfee commissioned the Security and Defense Agenda (SDA), a prominent think tank based in Brussels, to canvas global leaders and cybersecurity experts for the report entitled, “Cybersecurity: The Vexed Question of Global Rules,” released at an event here on Monday.

The authors of the report emphasized the need for sharing information about threats in real time, both among nations around the globe and between the public and private sectors in any given country.

IRS helps bust 105 people in massive identity theft crackdown

admin — Thu, 02 Feb 2012 01:19:15 +0000

The Internal Revenue Service and the Department of Justice teamed up for a coast-to-coast crackdown on identity thieves this week.

The coast-to-coast law enforcement onslaught arrested 105 people in 23 states and included indictments, arrests and the execution of search warrants involving the potential theft of thousands of identities and taxpayer refunds, the IRS stated. In all, 939 criminal charges are included in the 69 indictments and information related to identity theft.

ObserveIT – How to stop Identity Theft at its source

admin — Thu, 02 Feb 2012 01:18:34 +0000

There are lots of tools and procedures that we arm our users with to protect their identity. (ex: Two Factor Authentication, Password complexity and reset rules, etc.)

But once an identity is stolen, no tools can really identify or track the incident. The responsibility for detection liesentirely on the security officer. Why? Because “That’s the way we always did it!” With identity theft running rampant, this is just plain dangerous thinking.

ObserveIT – Version 5.6 is coming soon!

admin — Wed, 01 Feb 2012 04:44:15 +0000

We’re packing lots of great new features into the upcoming release. ObserveIT Enterprise v5.6 includes many new levels of protection. The most noteworthy new capability is a groundbreaking solution for catching incidents of identity theft, which lets you turn your thousands of users into your security detection network. Read more about it here.

v5.6 also brings live-session messaging and remote locking, more functionality in our policy messaging module, even deeper self-auditing mechanisms and added archiving functionality.

Google, Microsoft, Facebook, Bank of America team to wipe out phishing

admin — Wed, 01 Feb 2012 04:43:26 +0000

Can industry heavyweights Google, PayPal, Microsoft and AOL — along with 11 others in high-tech such as Facebook and LinkedIn, as well as the financial world’s Bank of America and Fidelity Investments — succeed in stopping phishing attacks right in their tracks? In uniting behind an effort called DMARC.org unveiled today, the group says it can through policy-based steps filter out spoofed email that attackers use for phishing.

“Whether you are an enterprise or offering a consumer service, you can apply this policy now,” says Brett McDowell, senior manager of customer security initiatives at PayPal, who is chairman of the organization DMARC, which stands for “Domain-based Message Authentication, Reporting and Conformance.” The DMARC.org site today published guidelines and the specification for its technology, which makes use of the well-known standards Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM), two basic approaches widely used today for authenticating email.

Understanding and Selecting Database Security Platforms

admin — Wed, 01 Feb 2012 04:40:48 +0000

We love the Totally Transparent Research process. Times like this – where we hit upon new trends, discover unexpected customer uses cases, or discover something going on behind the scenes – are when our open model really shows its value. We started a Database Activity Monitoring 2.0 series last October and suddenly halted because our research showed that platform evolution has changed from convergence to independent visions of database security, with customer requirements splintering.

These changes are so significant that we need to publicly discuss them so can you understand why we are suddenly making a significant departure from the way we describe a solution we have been talking about for the past 6+ years. Especially since Rich, back in his Gartner days, coined the term “Database Activity Monitoring” in the first place. What’s going on behind the scenes should help you understand how these fundamental changes alter the technical makeup of products and require new vocabulary to describe what we see.