Arbor Networks has announced that it has beefed up the management and security capabilities in the new version of its traffic monitoring and security platform.
Arbor Peakflow is a product that offers intelligent collection and analysis of all security threats on a network, including malicious threats and denial of service (DoS) attacks. It is widely used in ISP and carrier-based environments, where there is a pressing need to detect, analyse and mitigate against a broad range of network threats.
Arbor Peakflow SP is a version that has been specifically designed for service providers and large enterprises. Arbor says the SP version has improved traffic engineering and operational efficiencies, and that it increases profitability by delivering new revenue-generating managed services.
Arbor has now updated the package with Peakflow SP 5.0. "The new Peakflow SP 5500 device nearly doubles the performance and scalability of the previous version," said the company. Indeed, Paul Scanlon, Product Manager for Arbor Networks described it as a "next major upgrade" for the product. One of the biggest enhancements is the fact that it now includes Arbor's Active Level Threat Analysis System (Atlas 2.0).
Atlas was unveiled in March this year, when Arbor announced it was collaborating with more than 100 ISPs worldwide to create a more comprehensive Internet monitoring system. Previously, the Atlas system had been used mostly to collect data on security-related traffic such as distributed denial-of-service (DDoS) attack traffic.
Scanlon told Techworld that Atlas has now been enabled with fingerprint creation, alerting and mitigation.
"A fingerprint is a technical representation of a traffic set," he said. "Users can create fingerprint on the fly, and share with it others via others via the Atlas system. Previously, in order to do this, there was a clunky means via email. Today, fingerprints can be seamless shared between service providers."
"Users can choose whether to participate in the Atlas programme, but it gives them a more global outlook, with no additional cost," Scanlon said. "It provides a much bigger global picture of what is happening outside their borders."
Peakflow SP 5.0 has also enhanced its ability to conduct peering and transit analysis, to allow providers to gain a "deeper visibility into the traffic that enters and leaves their network." This includes on-demand packet analysis, global geography reports, and expanded transit peering reports.
It has also beefed up its threat detection and mitigation capabilities, thanks to the inclusion of a real-time mitigation dashboard. This is a single console that provides a real-time view into mitigation alerts and statistics, thereby giving network managers the ability to capture and view raw packet information for detailed forensics.
Arbor has also unified its alerting and workflow data, with a single interface that now combines all threshold, DDoS, BGP and Atlas fingerprint alerts. The new user interface also has real-time search, annotation and classification capabilities.
Other enhancements include improved service monitoring and protection, in order to allow network managers to gain insight into services while monitoring service levels. Other miscellaneous enhancements include multi-site reporting, additional router support, backup improvements etc.
Arbor sells its solutions on an appliance model, with CP systems starting at $135,000 (£87,000), including hardware and software.
Peakflow SP 5.0 will be generally available from 1 June.