CISCO'S SELF DEFENDING NETWORK
Protecting your network against present and future threats
Why existing security measures aren't sufficient.
Here's a staggering statistic: 9 in 10 organisations already have firewalls and anti-virus solutions in place; yet more than half continue to suffer from security breaches*. The reason? New and more sophisticated threats continue to spawn, spread and mutate at an alarming rate.
On top of this, networks have evolved from simple data pipes to the point where they allow "anytime, anywhere" access to a diverse range of users, including employees, vendors, clients and guests. Not surprisingly, the most damaging and costly security breaches often come from within the company - that is, authorised users who, knowingly or unknowingly, introduce viruses, worms or Trojan Horses from inside the "fortress" perimeter.
Even by assembling a collection of best-of-breed point-products, you may still not be giving your network the level of security you need - the protection simply isn't enough. What is needed is a new way of thinking about security, which is why Cisco has developed a roadmap for a more proactive, automated and intelligent approach. An approach that effectively enables your network to defend itself.
What is a Self-Defending Network?
To begin with, don't think of it as "new technology". Think of it as a system approach that protect every point in your system infrastructure - from workstations to the server; and all network devices in between. This means that security must be embedded in every point so that each device and end-point plays a part in your overall defense strategy.
Cisco's Self-Defending Network is developed based on three principles: Integrated Security, Collaborative Security and Adaptive Threat Defense.
Building a Self-Defending Network |
Integrated Security
This marks the departure from the traditional "point-product" approach to security. It focuses on making every network element a point of defense, embedding security in routers, switches, and appliances, as well as on all endpoints like laptops, workstations and servers.
Integrated security involves:
- Secure Connectivity
- Multi-layer Defense
- Trusted Infrastructure
Find out more.
|
Collaborative Security
Once security is integrated within all points on the network, the next concern is how each point or device collaborates with other elements within the network to enable a more proactive and intelligent form of defense against network threats.
Collaborative security involves:
- Network Admission Control (NAC)
- Monitoring, Analysis, Response System (MARS)
Find out more.
|
Adaptive Threat Defense
This latest phase of the Self-Defending Network addresses the issue that the perimeter of the network no longer exists. The approach combines multi-layer intelligence, application protection, network-wide
control and threat containment within high-performance situations.
Adaptive Threat Defense involves:
- Anti-X defenses
- Application Security
- Network Control and Containment
Find out more .
|
* CSI/FBI Computer Crime & Security Survey 2004.
