Column Control DTX

Service Provider Strengthens Defense Against Cyber Attacks

Case Studies

The massive network of this high-profile provider of Internet services (including search, shopping, auctions, and news) is exposed to cyberattacks on a daily basis. As a result, the company needed a strong security infrastructure that would identify and prevent cyberattacks in real time while minimizing network latency and any impact on its end users. 

 

At the same time, the company needed to keep capital expenditures and operating costs under control to stay profitable in a highly competitive market. It wanted to minimize the time the information technology (IT) staff spent managing security to let them spend more time developing new services. And, although it was planning future network upgrades to keep up with traffic growth, the company also wanted to continue using as much of its existing security infrastructure as possible to keep costs from rising too quickly. 

 

Enhance Security With IPS Traffic Inspection

 

The first step was to strengthen live traffic inspection with deployment of a new and powerful intrusion prevention system (IPS). The provider worked with security experts to deploy a solution that could help staff visualize the source and nature of incoming attacks and respond to them quickly. 

 

In a business dependent on providing customers with fast access to their favorite services, the company needed to ensure traffic surges and cyberattacks meant to overwhelm security appliances do not cause overall network outages. The standard practice was to deploy an external bypass switch in front of each security solution deployed inline as insurance against an unexpected outage. Keysight iBypass switches also provided additional value by allowing IT managers to proactively take security devices offline for troubleshooting or software upgrades without having to wait for a network maintenance window.

 

Increase IPS Efficiency By Delivering Only Relevant Data

 

Given the extraordinary volume of network traffic, the company also needed a solution that would let it selectively manipulate the traffic delivered to the IPS and deliver it with minimal latency to increase efficiency and maintain a satisfactory customer experience.

 

The IT team also realized the company’s needs would change over time as cyber threats evolved. This led them to request a solution in which the solution could be changed and updated easily. With the scale and complexity of the network, the team also wanted to make system-wide changes easily from a central location to minimize the need for hands-on involvement.

 

The company ended up choosing an Keysight network packet broker and is easy-to-use graphical interface. The Keysight Vision ONE solution aggregates traffic collected by the network taps and optimizes it according to rules provided by the IT staff, delivering only relevant data to each security appliance.

 

“As part of our efforts to enhance network security, we wanted to keep track of the different types of incoming cyberattacks and respond to them automatically. Previously, IP addresses were the only information we had available on attacks. We wanted to implement security devices, such as IPS and WAF (web application firewall), to keep track of attacks in greater detail.” -Manager, Network Security

 

×

Please have a salesperson contact me.

*Indicates required field

Preferred method of communication? *Required Field
Preferred method of communication? Change email?
Preferred method of communication?

By clicking the button, you are providing Keysight with your personal data. See the Keysight Privacy Statement for information on how we use this data.

Thank you.

A sales representative will contact you soon.

Column Control DTX