New release of RealSecure 6.5

RealSecure 6.5

The latest version of RealSecure is ready to be downloaded from the ISS website download center.

The RealSecure Network Sensor, Server Sensor and Workgroup Manager 6.5 are available at: http://www.iss.net/eval/eval.php

RealSecure 6.5 is a hybrid intrusion detection system that includes new sensor signature updates and new features for Network Sensor, Server Sensor, and Workgroup Manager. RealSecure 6.5 reduces total cost of ownership by offering full remote upgrade capability enabling customers to easily update and support their large distribution of sensors.

RealSecure 6.5 includes:

• RealSecure Server Sensor 6.5
• Windows NT/2000
• Solaris SPARC 2.6, 7 or 8
• Linux Red Hat 7.1, Kernel 2.4.2-2
• RealSecure Network Sensor 6.5
• Windows NT/2000
• Solaris SPARC 2.6, 7 or 8
• Nokia IPSO 3.4.1 (or higher) on the IP330, IP440, IP530, IP650 or IP740 security appliances
• RealSecure Workgroup Manager 6.5
• Windows NT/2000
• Command Line Interface (CLI) 6.5
• Windows NT/2000
• Solaris SPARC 2.6, 7 or 8
• Linux Red Hat 7.1, Kernel 2.4-2

RealSecure Network Sensor and Server Sensor 6.5 are a part of the RealSecure Protection Systems, which perform attack recognition, incident response, and intrusion prevention in real-time, with full customization of signatures and response capabilities, and is managed and integrated seamlessly with the RealSecure SiteProtector(tm) application.

RealSecure Server Sensor 6.5

RealSecure Server Sensor 6.5 is the next step in the evolution towards the RealSecure Protection Systems, by introducing new host intrusion technologies to monitor, analyze, and proactively respond against SSL encrypted application layer intrusions for both Apache and IIS web servers. Server Sensor 6.5 also adds support for SNMP v3 to allow Server Sensor to easily integrate into enterprise infrastructures.

Features and benefits include:

• Remote management capability. Full remote upgrades allow customers to remotely update their large distribution of sensors from the Workgroup Manager, so they will not have to manually visit and update each sensor when a new version of RealSecure is released, thereby reducing the total cost of ownership.
• Web Application Protection. Server Sensor 6.5 provides SSL intrusion monitoring, analysis, and response capability for IIS 5.0 and Apache 1.3.
• Enterprise management support. Server Sensor 6.5 will add SNMP v3 as a Server Sensor TCL response to allow users to integrate Server Sensor into their existing infrastructure with enterprise management applications.
• Enhanced protection. RealSecure 6.5 includes new signatures for Server Sensor, and full technical support for user defined network signatures. User-defined network signature creation capability offers sophisticated users the opportunity to write or customize their own signatures to identify new attacks specific to their environment.

RealSecure Network Sensor 6.5

Features and benefits include:

• Full Remote Upgrades. You can now upgrade your 5.x and 6.0 network sensors from the console without physical access to the sensor. You must first upgrade the RealSecure console and Event Collector to version 6.5 and then run the sensor upgrade. Please read the installation instructions for complete details.
• 64-bit Solaris 8 support. RealSecure network sensor is a 32-bit application now supported on both 32 and 64 bit Sun SPARC systems running Solaris 8.
• New Signatures. RealSecure 6.5 contains all the signatures in previous X-Press Updates (through XPU 3.3) plus additional signatures to provide comprehensive protection.

On the Nokia appliance, we now offer:

• Session termination in stealth mode. RealSecure for Nokia will now allow session termination, otherwise known as RSKills, to end an attacker's connection in stealth mode. Stealth mode is the recommended way to deploy a sensor that makes it invisible to detection.
• Two sensors on one appliance. There is now full support for operation of two sensors on a single appliance. This mode of operation is recommended only for the IP440 or higher and for monitoring of low bandwidth segments. Allowing two sensors to operate from a single appliance allows customers to leverage their investment in hardware to provide greater coverage at lower cost.

Note: RealSecure for Nokia 6.5 should be available for download in the next 4-6 weeks.

For more information on the release of RealSecure 6.5, please contact the following:

• For additional product information:
• http://www.iss.net/customer_care/resource_center/online_doc/ssreadme.tx t
• Audra Eng, Server Sensor Product Manager, aeng@iss.net, 415-379-3566
• Jason Anderson, Network Sensor Product Manager, janderson@iss.net, 404-236-3997
• Brian Laing, Workgroup Manager Product Manager, blaing@iss.net, 650-367-9376
• John Cloonan, Technical Product Manager, jcloonan@iss.net, 513-936-8364
• For sales information:
• sales@iss.net
• 888-901-7477 or 404-236-2600
• For education, consulting and support information, including ISS SecureU training on RealSecure 6.5:
• Customer Support - iss.support@us.ibm.com, 888-447-4861
• CSG West - John Franklin, Business Development Manager, jfranklin@iss.net, 949-916-8037
• CSG East - Joel Williams, Business Development Manager, jwilliams@iss.net, 404-236-3971
• SecureU training - htt p://education.iss.net/course_descriptions/iss_courses/advanced.php, 888 263-8739.