|
As part of this collaboration, the companies have demonstrated the industry's broadest reference implementation of 10 Gigabits-per-second (Gbps) signature detection, by using a combination of Endeavor Security's market-leading FirstLight signature knowledgebase and NetLogic Microsystems' NETL7 Layer 7 knowledge-based processors. This combined solution enables customers to implement next generation secure web, unified threat management (UTM), IPS and policy gateway devices with unprecedented performance and uncompromised security protection against complex and mutated threats.
The solution uses NetLogic Microsystems' NLS210HAP knowledge-based processing solution to accelerate detection of signatures in Endeavor's FirstLight signature knowledgebase to wire-speed 10Gbps rates. The NLS210HAP knowledge-based processing solution features NetLogic Microsystems' revolutionary Intelligent Finite Automaton (IFA) architecture, which uses a multi-threaded hybrid of finite automaton algorithms to enable lower power consumption and memory requirements while enhancing performance, database flexibility and compilation speed for the largest and most complex intrusion prevention, anti-virus and application detection databases.
The IFA provides over 100 Terabits per second (Tbps) of ultra-low latency access bandwidth to on-chip rule databases to effectively accelerate complex and iterative content inspection, while eliminating the need to provision for the high-latency and costly off-chip memory which competing solutions may use. The high performance of the NLS210HAP knowledge-based processing solution is enabled by its 8-lane PCI-Express interface, which allows it to take full advantage of the bandwidth supported by the newest general purpose CPUs.
In addition to the high-end 10Gbps reference solution, the companies have also collaborated to provide a broad range of solutions that enable OEMs to seamlessly scale the performance of their products down to entry-level 250Mbps with a common hardware and software architecture.
"NetLogic Microsystems NETL7 knowledge-based processors have proven to be very powerful, easy to use, robust, and cost-effective", stated Chris Jordan, CEO of Endeavor Security. "Endeavor is excited to be partnering with NetLogic Microsystems to deliver high-performance solutions using our FirstLight signature knowledge base. Performing signature matching at multi-gigabit speeds with even a few signatures is already a significant challenge for our customers, and forces them to trade off security in favor of performance. This collaborative partnership will enable our OEM customers to achieve wire speed performance of up to 10Gbps with a database of over 16,000 signatures, resulting in security without compromise."
Endeavor Security's FirstLight signature knowledgebase is the industry's largest multi-vendor commercially-available IPS and malware database. It is comprised of over 16,000 highly-accurate component-based signatures, which cover not only the attack exploit or vulnerability, but also the infection vector, payload and frame. The FirstLight signature knowledge base enables security OEMs, networking vendors, government agencies and Telco/ISPs to protect their networks against intrusions, viruses, vulnerabilities, compliance violations, blacklist address accesses, policy violations, web attacks and blended threats.
The FirstLight signature knowledge base is supported by the FirstLight Active Malware Protection Grid, which captures new malware and attacks globally, enabling high speed signature generation for deployment to customers via Web XML SOAP. The FirstLight signature knowledge base is widely deployed by U.S. government agencies and leading security vendors such as Clavister, D-Link, Enterasys, Secure Computing, Trustwave and Watchguard Technologies.
"We are raising the bar by partnering with a respected security leader to deliver a real-world solution incorporating a best-of-breed intrusion protection signature knowledge base", stated Chris OReilly, vice president of marketing at NetLogic Microsystems. "Endeavor's FirstLight signature knowledgebase has achieved broad customer adoption, and the combination of these two solutions creates a proven solution for OEMs to add security for high-speed security appliances and networking equipment, such as switches and routers."
The NLS210HAP knowledge-based processing solution and the FirstLight signature knowledge base are available now from NetLogic Microsystems and Endeavor Security, respectively. |