StoneGate Management Centre Geolocation Feature Shows Origins of Network Attacks

Stonesoft, an innovative provider of integrated network security and business continuity solutions, offers organisations advanced opportunities to protect their network by showing the geographical location of network attacks and suspicious traffic.

As a result, network administrators can identify anomalous trends traffic and monitor the specific locations from which network attacks are originating.

The geolocation feature provided by StoneGate Management Centre provides organisations with significantly improved situation awareness. In effect, organisations can defend their network proactively.

“Abnormal, or strange-looking traffic, together with the information provided by the geolocation functionality provides organisations with tremendous insight.

“Network traffic is known to follow specific trends, and the StoneGate geolocation feature is extremely fast to point out if inappropriate traffic originates from inappropriate locations, thus helping the administrator to validate between true and false positives”, says Klaus Majewski, VP of marketing at Stonesoft.

The University of Paderborn in Germany uses StoneGate IPS with the StoneGate Management Centre to protect their network environment.

“The StoneGate geolocation feature significantly helps us to identify the origins of suspicious traffic.

“Based on this information, we can quickly decide whether we should blacklist a suspicious connection or not, and we can also easily recognise a spuriously blacklisted case or a false positive.

“This has helped us to react faster, raise the level of our network security and save time and costs”, says Barbara Bajer, head of network operations at University of Paderborn.

Geographical location representations are resolved automatically from the GeoIP database which is integrated in the StoneGate Management Centre and updated along with the StoneGate Management Centre upgrades.

The administrator can also specify geolocations for private networks and address ranges.

The StoneGate product family comprises of the StoneGate firewall/VPN, IPS and SSL VPN solutions, all of which run under the same unified management.

This provides a comprehensive view on network security, helps to minimise security risks and significantly reduces the total cost of ownership (TCO) of large implementations.