Lockdown Networks Expands Security Interoperability and Boosts Performance.

Enforcer Allows Security Events from Any System to Drive NAC Policy, Improves End User and IT Experience

SEATTLE -- Lockdown Networks[R], the leading provider of Network Access Control (NAC) solutions that ensure all users and devices on the network comply with security policies, today announced that its flagship Lockdown Enforcer[TM] solution now delivers enhanced post-connect integration with a broad spectrum of third-party security and network infrastructure technologies. Lockdown Enforcer can incorporate security events into NAC policy from any system that outputs syslog notifications or supports web services, including intrusion detection systems (IDS), intrusion prevention systems (IPS) and network behavioral analysis (NBA). Other new features include a refined policy interface and expanded policy library; additional remediation resources; and support for 802.11 wireless solutions from Aruba Networks, Meru Networks and Trapeze Networks.

Because there is no security silver bullet to safeguard against all network threats, enterprises typically deploy a collection of security technologies that can be quite effective but may not interoperate to optimize network security. Lockdown Enforcer addresses this issue by providing a simple and effective way for security events to drive NAC-based policy actions. This enhanced integration adds immediate value to non-NAC security infrastructure and allows organizations to increase the ROI of their existing network security investments, while realizing more powerful and effective network access control.

"Lockdown Enforcer has proved to be a valuable policy enforcement tool for our customers, particularly as devices connect to the network," said Jeff Kowalski, chief operations officer of South Seas Corporation, a Littleton, Colorado-based reseller. "With this enhanced integration, our customers can take automated policy enforcement one step further by taking real-time action on events reported by existing IDS and IPS systems. As an added benefit, Enforcer offers the flexibility to add devices to the network without requiring extensive network infrastructure upgrades."

Unlike typical inline post-connect NAC solutions that support only one type of traffic analysis, Lockdown Enforcer receives inputs from a variety of sources, including IDS; IPS; NBA; event correlators; consoles; and other security technologies that detect malware, data theft, intrusions or other attacks. Using industry standard syslog notifications or an XML API, Lockdown Enforcer triggers any policy-based action, ranging from logging or email notifications to IT that provide critical user and device location information, to quarantine, assessment or remediation of the device.

"Network access control solutions are increasingly concerned with monitoring what happens after the initial connection is made, not just that entry decision," said Peter Christy, principal analyst, Internet Research Group. "Lockdown Networks is providing innovative and valuable solutions by enabling integration with a spectrum of related products that many enterprises already have in place. Enterprises stand to benefit from the approach because it improves the effectiveness of the initial NAC decision as well as adding valuable post-connect capabilities."

"Lockdown has long recognized the need for an interoperable, easy-to-deploy security solution to bring together key technologies that address the constantly evolving threats seen in today's enterprise networks," said Brett Helsel, CEO of Lockdown Networks. "We believe Lockdown Enforcer's integration capabilities empower organizations to make the most of multiple best-of-breed security technologies, without taxing IT resources or introducing additional integration and deployment complexity. By leveraging instead of replacing security infrastructure, we believe we're delivering a fundamentally different approach to post-connect security enforcement."

Security Central: How the Integration Works

Lockdown Enforcer can accept notification from third-party solutions through an XML API or via syslog (RFC 3164) notifications, effectively serving as a centralized platform for enforcing policy across an enterprise, from the network core to the edge. Lockdown Enforcer uses its Precision Policy Engine[TM] to integrate these external events with other factors such as identity, device posture and location to take appropriate policy-driven actions. For example:

* An IPS detects malicious traffic, blocks it and sends a syslog notification to Lockdown Enforcer.

* Based on the event severity code, Lockdown Enforcer determines what action to take in adherence to company policy. As an example, a critical alert may trigger immediate quarantine of the device, while a status alert may be ignored, logged, or may trigger an "FYI" email to an administrator with information on the user, device location and other relevant data.

Making NAC Easier, Better, Stronger

In addition to enhanced security interoperability, Lockdown Enforcer has introduced significant performance and ease-of-use enhancements. Highlights include:

* Supercharged Performance--An enhanced scanning engine reduces scan time for common checks, such as OS updates and hotfixes

* More Powerful Default Policies--Features a new library of pre-defined default policies that simplifies deployment and accelerates customization to support customer-specific policies

* Support for Wireless Switches and Controllers--Can now use 802.11 wireless solutions from Aruba, Meru and Trapeze as network control points, further expanding coverage of supported network topologies

* Enhanced Remediation Options--Offers a greater number of pre-defined remediation resources for faster setup

"Trapeze Networks is strongly committed to helping our customers uphold the stringent security standards necessary for today's wireless enterprise environments," said Andris Dindzans, director of product management, Trapeze Networks. "We are pleased to be working closely with Lockdown Networks to deliver powerful, secure networking solutions that combine leading-edge NAC technology with our Smart Mobile[TM] next-generation enterprise wireless solutions."

Pricing and Availability

Lockdown Enforcer is currently shipping with support for syslog and XML API integration. Pricing is $24,995 for a 1U Lockdown Enforcer appliance.

About Lockdown Networks Inc.

Lockdown Networks[TM] Inc. is the leading provider of Network Access Control (NAC) solutions that ensure all users and devices on the network comply with security and IT policies. Lockdown Networks leverages existing network infrastructure to deliver an all-in-one platform for enterprise-wide policy enforcement that maximizes network uptime and productivity while reducing compliance costs. Lockdown NAC is delivered on a suite of highly scalable appliances: Lockdown Enforcer[TM], Lockdown Commander[TM] and Lockdown Sentry[TM]. The Lockdown Intelligent NAC (iNAC[TM]) architecture integrates NAC with external security, endpoint, networking and infrastructure systems while the iNAC partner program enables third-party solution providers to collaborate on network access policy decisions, sharing information critical to network and endpoint security. Intel Capital has invested in Lockdown Networks, expanding the power of Lockdown NAC through support for Intel[R] vPro. Additionally, Lockdown earned the 2007 Info Security Hot Companies Award and the 2006 Red Herring 100 Award. For more information, visit www.LockdownNetworks.com.