Emulex and Myricom Now OISF Consortium Members
For solutions compatible with Suricata 1.3
This is a Press Release edited by StorageNewsletter.com on August 3, 2012 at 3:01 pm
Emulex
Corporation
and Myricom Inc.
announced that Emulex’s new OneConnect 10GbE Network Xceleration
solution with FastStack Sniffer10G application acceleration software
powered by Myricom is compatible with the latest release of then
Open Information Security Foundation (OISF) open source Suricata
engine (Suricata 1.3).
This technology combination
delivers higher rules processing performance, decreases packet drop
rates and improved server utilization for Intrusion Detection
(IDS)/Intrusion Prevention (IPS) deployments based on the Suricata
engine.
"Intrusion detection and
prevention at 10GbE rates is becoming increasingly important to large
enterprises today because the risk of malicious attacks by industry
predators is on the upswing and protecting the availability of data
continues to be a business critical requirement," said Shaun
Walsh, SVP of marketing and business development, Emulex."Emulex’s OneConnect
Network Xceleration solution with FastStack Sniffer10G is the only
standard 10GbE Network Interface Card (NIC) that can offer multiple
buffer support for Suricata. This leads to a gain of up to two times
the rules processing performance over standard NICs,1 resulting in
increased system security."
In addition to improved rules
processing, FastStack Sniffer 10G provides greater vulnerability
protection with lower packet drop rates and improved server
utilization with the ability to aggregate more 10GbE capture feeds
per system.
"The integration of
FastStack Sniffer10G packet capture/injection technology with
Suricata enables customers to achieve higher performance,
cost-effective IDS/IPS solutions for their security applications,"
said Dr. Nan Boden, CEO, Myricom. "FastStack Sniffer10G is a
clear example of Myricom’s expertise in vertical market applications
and our ability to deliver networking solutions that meet critical
market requirements."
The Emulex family of OneConnect
(OC) e12000 10GbE Network Xceleration solutions combined with
FastStack Sniffer10G software provides a powerful, cost-effective
solution for network traffic capture, injection and analysis for
performance–sensitive and mission–critical
markets, such as network surveillance, monitoring and analysis, Deep Packet Inspection, and DDoS defense appliances.
FastStack Sniffer10G includes
the following features:
-
100% Lossless Packet Capture:
FastStack Sniffer10G provides 100% lossless packet capture and packet
injection for all Ethernet packet sizes within a 10GbE data stream.
This line-rate performance enables more thorough inspection and
better detection of threats for cyber security environments.
-
Multi-Core Utilization:
FastStack Sniffer10G can distribute incoming packets over multiple
CPU cores to not only improve CPU utilization, but also improve
application performance through partitioning, parallelism, and
process sharing.
-
Increased Bandwidth: Port
aggregation allows network traffic from two or more ports from the
same or different OCe12000 adapters.
Emulex and Myricom are also now
OISF Consortium members, a non-profit foundation that has formed a
multinational group of the software developers in the security
industry and a consortium consisting of many cyber security companies
that engages the open-source security community to identify current
and future IDS/IPS customer needs.
"As OISF Consortium
members, Emulex and Myricom help us meet customer system integration
needs and position us to provide cost-effective full life-cycle
support for OISF open source solutions," said Matt Jonkman,
president of the OISF. "The integration of FastStack
Sniffer10G and Suricata demonstrates that strong partnerships between
government, industry, and the open source community are drivers for
the best overall network security solutions."
Emulex and Myricom demonstrated the
rules processing performance benefits of FastStack Sniffer10G’s
multiple buffer support for Suricata applications using OISF-provided
data and test rule sets to mimic a realistic IDS/IPS deployment at
Black Hat USA 2012 in Las Vegas, NE.