An NDR Innovation to Strengthen the Scope of Threat Management

Stamus Networks, a global provider of high-performance network-based threat detection and response (NDR) systems, has officially partnered with Array Networks, a leader in application delivery and cybersecurity products. According to certain reports, the stated partnership happens to be built around two product collaborations that will unlock new NDR capabilities for existing programs, as well as new opportunities for organizations that couldn’t previously justify the cost in some ultra-high throughput applications. One of the two product collaborations will focus on developing high-speed network traffic decryption for advanced threat detection and response. You see, the combination of Array SSL Intercept and the Stamus Security Platform will make it possible for network defenders to gain visibility into SSL/TLS encrypted traffic. This, in turn, will allow them to quickly detect and respond to hidden threats.

The other product collaboration, though, will look to realize intelligent traffic optimization and aggregation for high-performance threat detection and response. Here, Array Network Traffic Broker will link up with Stamus Security Platform to aggregate and optimize network traffic for cost savings and streamlined NDR deployments.

Talk about each of the two components on a slightly deeper level, we begin from the partners’ pursuit of high-speed network traffic decryption. In essence, while it has shown to bear enormous value when safeguarding information and ensuring data privacy, SSL/TLS encryption comes with its own set of challenges. We say this due to its tendency to mask traffic from network defenders. Such a limitation can complicate the process of detecting malware, data breaches, and other malicious activity.

Fortunately enough, the partnership in question addresses that very problem. As for how it does so, the answer would include Array SSL Intercept acting as a secure proxy which can decrypt SSL/TLS traffic and then send the data to the Stamus Security Platform for inspection. The Stamus Security Platform, on the other hand, will be tasked with delivering actionable network visibility and multi-layered threat detection to security teams. Once it does that, the Array SSL Intercept will re-encrypt the traffic before it is eventually forwarded to its destination.

“As cybercriminals continue their relentless assault on organizations, leaving the encryption dilemma unresolved introduces tremendous risk,” said Ken Gramley, CEO of Stamus Networks. “While we’ve developed very effective capabilities to identify threats in encrypted communications, some organizations still require complete visibility into all communications. The combination of the Stamus Security Platform and the Array SSL Intercept offers a powerful solution to a historically difficult problem and provides enterprise security teams with unprecedented visibility into threats.”

Before we turn our attention towards other aspect of this collaboration, we must acknowledge that, in very high-speed and distributed networks like those in large datacenters and telecom operator networks, deploying NDR has posed significant cost and complexity challenges for organizations. In response, Array Network Traffic Broker and the Stamus Security Platform come together to significantly simplify the process, making NDR deployments more accessible and cost-effective in the stated demanding environments. To expand upon how they do that, Array Network Traffic Broker serves as an intelligent traffic management layer, capturing, aggregating, and filtering network traffic from various sources. After doing so, it then directs traffic to the Stamus Security Platform This, in turn, goes a long distance to achieve optimal utilization of its threat detection capabilities.

Going back to how Array Network Traffic Broker aggregates and filters high traffic volumes from various network segments, it does that through sources like data centers, branch offices, and cloud environments.

“Our partnership with Stamus Networks aims to provide comprehensive network visibility and threat detection and response capabilities to as many organizations as possible,” said Vishal Parikh, Strategy & Alliance Head at Array Networks. “These first two product pairings are the first of many. We look forward to continued collaboration that will result in powerful and practical solutions that overpower traditional security roadblocks to keep organizations cyber resilient.”

Hot Topics

Related Articles