Check Point Software today launched Interspect, a family of security appliances designed to block the spread of computer worms across internal networks.
The appliance segmentg internal networks into security zones to block the spread of worms such as Nimda and Blaster, which spread like wildfire if left unchecked.
If a worm-infected laptop is, say, connected to a network, the InterSpect appliance blocks the PC from general access and places it in a quarantined area where it can be more easily decontaminated. This gives sysadmins breathing space when dealing with security flaps.
Cisco's Network Admission Control program also combats computer worms in internal networks.
Nick Lowe, Check Point director for Northern Europe, says his firm's approach scores over Cisco's by avoiding the need to install client software. Host-based intrusion preventions systems block suspicious behaviour, such as that generated by worms. But the technology is expensive and subject to false negatives, Lowe says.
Sorting the wheat from the chaff
Check Point is best-known for its perimeter security VPN and firewall products. But last year the company proclaimed its intention to develop technology for internal networks and Web security. Interspect falls under Check Point's new, bigger remit.
InterSpect appliances inspect Intranet traffic to block malicious behaviour such as traffic associated with known vulnerabilities. Check Point says its kit can, by using this technique, pro-actively block attacks before virus definitions.
InterSpect appliances are based on Check Point's Stateful Inspection and Application Intelligence technologies and designed specifically to inspect the protocols and applications used on internal networks.
According to Check Point, InterSpect is better than products designed for perimeter security within Intranet environments because of its greater awareness of internal applications and protocols (such as database protocol SQL).
Check Point InterSpect appliances are available immediately in three flavours costing from $9,000 to $39,000. The devices are rackmountable to make them suitable for deployment in service provider environments. Competition is supplied by the likes of Top Layer Networks, Mazu Networks and others. ®