EXCIS - Services - Networking Solutions

SECURITY IMPLEMENTATION > Virtual Private Networks

One approach to implement security, is a layered approach. However, no single element within the layers is enough to protect your business.

Many companies believe that by just adding a firewall to their network, they are safe. Sadly this is not true. If you really want to protect your business, other considerations should also be made.

In today's networks, the firewall is considered the boundary between the inside world which is under organisational control and the outside world which contains the Internet.

For a non determined attacker, sometimes the firewall is enough to deter any kind of attack or probe. To the determined attacker or to an attacker with a newly found exploit, the firewall may not be enough.

Firewalls may have weaknesses. These weaknesses could be due to software, hardware and security policy Once inside the firewall, any attacker has access to your networks and the information that your organisation holds.

Your internal systems should be secured with the latest patches and should not run unnecessary services.

This is all very well, but if there is an attacker you still need to know. This is where Intrusion Detection Systems come in.

Intrusion Detection Systems are normally used as a second line of defence. They examine anomalies in network traffic. All traffic passing across the boundary of your network will have a signature and all types of traffic have profiles.

Each attack signature or profile is held within the database of the Intrusion Detection System and by comparing all traffic passing across the network with this database, an attack can be detected.

Excis Networks can supply several different types of Intrusion Detection Systems. From hardware based products that work on their own to integrated chassis based solutions that can scan multiple sub-networks at a time.

We also provide specialist software that can reside on your server or network infrastructure. This software looks at changes made to files or processes and reports anything untoward immediately to a central reporting station.

Whatever your Intrusion Detection needs, we can provide multiple solutions that can be used in conjunction or in addition with existing systems.

Please also see;

Security Strategy Formulation

Firewall Technology

Security related Case Studies