SECURITY

Comparex propose the following Data Center Security Challenges:

  • Storage Security
  • Patching

STORAGE SECURITY

Situation

Enterprises and government organizations are amassing terabytes of data into networked storage environments as they seek to improve access to information and simplify network management. By nature, these storage networks do not provide boundaries to partition data from different groups, departments or users, leaving information aggregated and highly vulnerable to unauthorized access.

There are a number of trends driving storage security requirements:
  • Insider Threat: While organizations have spent billions on perimeter security measures, research shows that a significant percentage of attacks come from inside the firewall.

  • Storage Consolidation: Data consolidation projects continue to aggregate data into networked storage environments, removing physical barriers and increasing the stakes if there is a breach.

  • Replication: Because of backup and disaster recovery programs, multiple copies of data are made. These copies are frequently distributed outside the datacenter, significantly increasing the number of access points.

  • Outsourcing: As organizations seek to control costs and improve efficiency, they are increasingly outsourcing IT functions, resulting in company outsiders with access to data.

  • Regulatory Compliance: A growing number of privacy regulations, such as Gramm-Leach-Bliley (GLBA), California's SB1386, and the Health Insurance Portability and Accountability Act (HIPAA), are putting pressure on organizations to ensure the privacy of the data they capture and maintain.

Solution

Comparex has selected the DataFort solution. It combines secure access controls, authentication, storage encryption, and secure logging to provide unprecedented protection for sensitive stored data. Because DataFort protects data at rest and in flight with strong encryption, even organizations that outsource IT management can be sure their data assets are secure. In short, DataFort offers a powerful and cost-effective solution to address a broad range of external, internal, and physical threats to sensitive data.

Benefits

  • Transparent Deployment
  • Wire-speed Performance
  • Hardware-based Security
  • Secure Enterprise-wide Key Management

back to top ˆ

PATCHING

Installing a vendor’s security patch on a server is prudent because it is designed to addresses the root cause of a vulnerability.

Unfortunately software patches can also introduce problems. Vendors may inadvertently release faulty patches and patches may break other applications.

On a server, patch-induced downtime can be just as devastating as a malicious attack. If problems are encountered during installation, the patch may be difficult or impossible to roll back. All patches must be thoroughly tested prior to deployment.

Extensive testing creates a deployment lag that leaves servers at risk, takes resources away from value-added initiatives, and is expensive, unplanned and unbudgeted.

Solution

Comparex has selected the Blue Lane solution. It ensures business continuity and security on mission critical applications and servers by providing the first industry Inline Patch Proxy (IPP)

Blue Lane promotes business continuity by providing an inline patch proxy for server OS, database and enterprise applications
  • Eliminates reactive server patching
  • Instant patch protection for hundreds of servers
  • Zero footprint on servers

ServerShield (and VirtualShield for Virtual Environments) have the ability to perform the exact same inline corrective action as the software vendor patch would perform on the server. Without requiring any code or configuration changes on the server, ServerShield maintains the state information about this particular transaction. When it is determined that the client has attempted to change the address from the original value set by the server, ServerShield intervenes and resets the changed value back to the original, just as the patch would have done.

back to top ˆ