Award-Winning Sourcefire 3D System Integrates Threat and Endpoint Intelligence Capabilities; Latest Version Delivers Integrated NBAD Data, Passive Network Discovery, Surgical Scanning and Increased Remediation Capabilities.

COLUMBIA, Md. -- Sourcefire, Inc., the world leader in intrusion prevention, today announced version 4.5 of the Sourcefire 3D System with increased policy enforcement, statistical flow analysis, traffic profiling and remediation capabilities. This new version of Sourcefire's real-time network defense system enables users to identify and analyze both internal and external threats, discover and address vulnerabilities, apply patches to target systems and limit the potential damage from a successful attack. With this release of its award-winning proactive security system, Sourcefire is combining previously disparate security market segments and providing customers with a comprehensive solution for stopping threats.

Building on the innovation of its RNA technology, the Sourcefire 3D System is the first intrusion prevention system to integrate Network Behavior Anomaly Detection (NBAD) capabilities into an IPS, providing users with the most accurate and effective intrusion prevention available. Users can set thresholds to measure anomalous activities, customize alerts and automate responses. Now with a single integrated system, users are able to analyze packets, assets and the flow of data over their network for increased threat and vulnerability management.

This new release also introduces a Nessus integration module which provides Sourcefire 3D customers the best of both worlds - passive discovery and targeted active scanning - for accurate, timely endpoint intelligence without the drawbacks of active scanning alone. Through integration with Nessus, the Sourcefire 3D System enables customers to pre-define flexible scanning policies that automatically respond to network change. For example, if RNA detects that a new port has been opened on a network asset, Nessus can be triggered to inspect just that port through a surgical scan. The Nessus Scan Input Module also allows users to automatically populate their Vulnerability Database with Nessus scan data and then maintain the data in real-time via the RNA 24X7 vulnerability feeds.

"For companies to effectively implement intrusion prevention, they must also have endpoint intelligence," said Martin Roesch, CTO and founder of Sourcefire. "This release of the Sourcefire 3D System provides users with the first system to integrate both active scanning and passive discovery capabilities in order to have accurate real-time endpoint intelligence. No other system provides this integrated combination to allow users to address the full threat spectrum."

The new version of the Sourcefire 3D System also provides endpoint intelligence to more products and services. This version delivers increased support for third party remediation tools in response to threats or increased data to other network security products. In addition to built-in modules for CISCO PIX and Checkpoint firewalls, Sourcefire can now interface with the Shavlik Patch Management System to automatically trigger the application of patches. In addition, the Sourcefire eStreamer interface has also been extended to allow for more granular data access for the leading SIM/SEM/System Management products.

"Providing endpoint and network intelligence to network security products significantly improves their capabilities and limits the obstacles to a successful deployment," says Gartner Research Director Amrit Williams in his report titled Use Endpoint Intelligence to Improve Security Defenses. "Organizations deploying network security products should look for their integration with vulnerability assessment and network intelligence solutions."

About Sourcefire's 3D System

Sourcefire's 3D Approach - Discover, Determine, Defend - to securing real networks in real-time provides proactive defense-in-depth through an integrated process of discovering risks, vulnerabilities and threats; determining their business impact; and taking the appropriate action to defend the network. Sourcefire's 3D System, including Sourcefire Intrusion Sensors and Agents, Sourcefire RNA Sensors and the Sourcefire Defense Center, provides companies with the most effective security possible. The Sourcefire 3D System has been awarded both the NSS Approved and the prestigious NSS Gold Awards.

The Sourcefire 3D System offers the most flexible and precise intrusion prevention and network discovery technologies worldwide. Sourcefire Intrusion Sensors utilize the award-winning Snort(TM) rules-based detection engine, bringing the benefits of signature, protocol, and anomaly-based inspection methods to all network traffic at speeds up to 8 gigabits per second. In addition, Sourcefire RNA Sensors passively monitor a network to deliver highly detailed, real-time profiles of all network assets including their configuration, behavior, potential vulnerabilities and associated changes. By tightly integrating and correlating the threat information provided by Sourcefire Intrusion Sensors and Agents with the network intelligence provided by Sourcefire RNA Sensors, the Sourcefire Defense Center easily prioritizes the millions of security events to determine the most critical events to an organization's business and takes the appropriate actions. These actions follow the ABCs of Defense - Alert, Block, Correct - all in real-time to deliver the most effective security.

About Sourcefire

Sourcefire, Inc., the world leader in real-time network defense solutions, is transforming the way organizations manage and minimize network security risks with its 3D Approach - Discover, Determine, Defend - to securing real networks in real-time. The company's ground-breaking network defense system unifies intrusion and vulnerability management technologies to provide customers with the most effective network security available. Founded in 2001 by the creator of Snort, Sourcefire is headquartered in Columbia, MD and has received numerous accolades including being named the Frost & Sullivan 2005 Network Security Infrastructure Protection Company of the Year. At work in leading Fortune 1000 and government agencies, the names Sourcefire and founder Martin Roesch have grown synonymous with innovation and intelligence in network security. For more information about Sourcefire, please visit www.sourcefire.com.