Recent well-publicized breaches of network and data security show vividly why it's more critical than ever to ensure the integrity of your agency's applications and sensitive data. But where do you start?

Three Wire's Best-of-Breed Solution

Three Wire has carefully selected six key partners to supply the component technologies that comprise our NAP solutions. Each of these complementary product sets represent "best of breed" answers to specific aspects of network and application protection. All are delivered in the form of hardened hardware/software appliances to avoid any impact on your current systems, speed deployment and ROI, improve security, and eliminate the need to procure additional general-purpose hardware.

We analyze your unique situation, propose the optimal configuration of products to address your needs, and then deliver the expert consulting services needed to successfully deploy a comprehensive, cost-effective, scalable and ‘future-proof’ NAP solution. And because we’re completely independent of any particular point-product vendor, you can be assured of our objectivity. If your ideal solution requires a product not supplied by one of our current partners, we’ll even source and integrate it for you.

Benefits Of A Custom NAP solution From Three Wire Systems:

• Ensures policy and regulatory compliance and lowers risk by protecting against external and internal threats at every level of the network: Outside-the-firewall perimeter intrusion prevention; real-time packet flow inspection at the core level; and PKI validation, email security, log monitoring/analysis, content monitoring/filtering, and database security, risk management, and governance at the internal level.
• Integrates best-of-breed products to optimally address each individual facet of the complete solution.
• Avoids any impact on your existing systems and ensures security through the use of hardened, stand-alone server appliances.
• Provides high performance, scalability, and both current and future flexibility by avoiding a single-vendor ‘one-size-fits-all’ software-based architecture

Vendor Profiles

TIPPING POINT: Intrusion Prevention System (IPS)

• Prevents attacks with proactive, real-time packet flow inspection
• Protects against both insider threats and external attacks
• Maximizes network bandwidth through traffic normalization and elimination of unwanted traffic
• Segments network automatically to isolate malicious traffic from infected endpoints
• Ensures high availability and 10Gb/sec traffic flows without degradation through hardware scalability, load balancing, and agency-wide management capabilities

TUMBLEWEED: PKI Validation Authority (VA Suite)

• Provides real-time digital certificate validation in both standard and custom desktop and server applications
• Supports open PKI standards including OCSP, SCVP, CMP, and VACRL for easy integration and to evolve with your environment
• Offers a comprehensive, scalable, and proven framework already deployed by agencies including DoD, DHS, U.S. intelligence communities, and all branches of the U.S. military
• Certified Common Criteria, FIPS 201, NIST PDVAL, FIPS 140-2, DoD JITC, Entrust-Ready and IdenTrust compliant

TUMBLEWEED: Email Security and Content Management

• Protects against virus outbreaks, botnets and zombies, spam, denial of service (DoS) and directory harvesting attacks
• Eliminates up to 90% of email traffic before it even enters your email infrastructure
• Prevents email data leakage that can jeopardize your agency’s reputation and regulatory compliance through intuitive policy controls and enforcement of rules around content, users, recipients and attachments
• Offers rapid installation, high performance (up to two million messages/hour), and intuitive centralized administration

8e6 TECHNOLOGIES: Web Content Monitoring and Reporting

• Filters or blocks internet access based on a URL database (included), file type, protocol (HTTP, FTP, NNTP, etc.), IP address, or port number. Can also block use of IM, peer-to-peer (P2P), and anonymous proxies as desired.
• Allows real-time monitoring of user activity, and can lock down user workstations when defined thresholds for inappropriate access are exceeded.
• Offers graphical dashboards, trend charts, standard reports, and custom detailed forensic analysis with drill-down capabilities
• Enables real-time threat monitoring, alerting, and remediation

GUARDIUM: Enterprise Database Security and Activity Monitoring

• Discovers and classifies all databases, applications, clients, and sensitive data
• Reduces risk by assessing vulnerability, configuration, change tracking, and encryption
• Performs proactive policy-based enforcement by monitoring with contextual and behavioral analysis
• Delivers centralized governance, compliance reporting, and forensic data mining
• Supports all major databases and hardware platforms

INTELLITACTICS: Enterprise Security Information and Event Management (SIEM)

• SAFE LP appliances collect all log data from all sources at high speeds, and load it into a Security Data Warehouse (SDW) for processing and multidimensional analysis
• Uncovers hidden information and relationships in log data and presents them as events
• Ensures compliance with log management mandates of PCI, SOX, HIPAA, GLBA, BASEL II, NERC, or FISMA.
• Automates many steps of audit preparation and provides information to actively defend information assets