A highly scalable database designed to capture real—time log event and network flow data, revealing the footprints of would be attackers. Extreme Networks SIEM™ is an enterprise solution that consolidates log source event data from thousands of devices distributed across a network, storing every activity in its raw form, and then performing immediate correlation activities to distinguish the real threats from false positives. It also captures real—time Layer 4 network flow data and, more uniquely, Layer 7 application payloads, using deep packet inspection technology. An intuitive user interface shared across all Extreme Networks Security Analytics™ components helps IT personnel quickly identify and remediate network attacks by rank, ordering hundreds of alerts and patterns of anomalous activity into a drastically reduced number of offenses warranting further investigation. While organizations do require increasingly sophisticated security measures to address today’s security threats, reducing management complexity and containing administration costs are also top priorities.

Extreme Networks Vulnerability Manager™ helps security teams identify resource configuration issues, understand the impact of software patching schedules, coordinate with intrusion prevention systems to block open connections, and establish continuous monitoring of systems that can’t otherwise be remediated all from a single, integrated dashboard. By correlating vulnerability data with Extreme Networks SIEM™ event and threat analysis, Risk Manager™ device configuration and network traffic analysis, and external databases, Vulnerability Manager can help organizations build actionable plans for deploying their often constrained IT staffing resources. Extreme Networks Security Risk Manager™ automates risk management functions in mission critical areas, helping security professionals safeguard their organizations against an ever—growing spectrum of attacks, vulnerabilities and compliance mandates. On today’s smarter planet, organizations require better visibility into their security policies, postures and practices than ever before, because instrumented, interconnected and intelligent businesses collect and use more information.

Intrusion Prevention System–Integrated Security, Visibility, And Control

Provides exceptional functionality by locating, containing, and removing the source of the attack from the network. Extreme Security Threat Protection™ platform is designed to protect your business critical network infrastructure through a unique combination of visibility and control and prevention. Extreme extends the abilities of traditional intrusion prevention systems by offering a next generation solution that provides network security professionals with complete security, visibility and control over their network. Extreme Security Threat Protection™ helps reduce cost and complexity by consolidating point solutions into a single, extensible network security platform. And by controlling and eliminating non critical, high bandwidth activity, organizations can achieve additional cost savings within the infrastructure. Extreme Networks Extreme Security Threat Protection™ is an integrated solution that can help you accomplish all of these tasks. By combining several advanced capabilities, this solution can help prevent threats, provide critical insight into network activities and enable application control, helping to establish a new security.

Extreme Networks Security Analytics G2 Risk Manager

Extreme Networks Security Analytics Risk Manager™ is an integral component of a complete security intelligence solution that can help security professionals stay ahead of advanced threats. Extreme Networks Security Analytics Risk Manager™ automates risk management functions in mission critical areas, helping security professionals safeguard their organizations against an ever—growing spectrum of attacks, vulnerabilities and compliance mandates. The ability to proactively quantify risk from vulnerabilities, configuration errors, anomalous network activity and threats can help organizations prevent exploits that target high value assets and data. Extreme Networks Security Analytics Risk Manager™ correlates network topology information with data from Extreme Networks Security SIEM™ including asset configurations, vulnerabilities, network events and flow patterns. This provides valuable insights revealing, for example, which assets and vulnerabilities are causing the most risk, so IT staff can prioritize their remediation tasks. It can also help identify firewall and intrusion prevention system (IPS) misconfigurations that may allow attackers into the network and create inefficiencies in devices.

Extreme Networks X–Force Threat Intelligence

You can extend these comprehensive analytics still further, using Extreme Networks X—Force Threat Intelligence™ to augment security analytics capabilities by feeding its proprietary threat insights, including data on malware hosts, spam sources and anonymous proxies. Combining worldwide intelligence from Extreme Networks X—Force™ with security information and event management (SIEM), log management, anomaly detection, and configuration and vulnerability management capabilities provides users with additional context on security incidents, helping  prioritization of incidents requiring examination—and enabling prevention or minimize damaging attacks. Security Analytics portfolio, an integrated family of products that helps detect and defend against threats by applying sophisticated analytics to more types of data. In doing so, the platform helps identify high priority incidents that might otherwise get lost in the noise. And you can extend these comprehensive analytics still further, using Extreme Networks X—Force Threat Intelligence™ to augment security analytics capabilities by feeding its proprietary threat insights, including data on malware hosts, spam sources and anonymous proxies.

Extreme Networks Vulnerability Manager

Extreme Networks Security Vulnerability Manager™ can help organizations minimize the chances of a network security breach by using a proactive approach to finding security weaknesses and minimizing potential risks. It uses a proven vulnerability scanner to collect up to date results, but unlike other solutions, it leverages the capabilities of Extreme Networks Security Analytics™ platform to present the data within the overall context of the network usage, security and threat posture. Extreme Networks Security Vulnerability Manager™ identifies key security weaknesses to help thwart future attacks. Extreme Networks Vulnerability Manager™ identifies key security weaknesses to help thwart future attacks. Extreme Networks Security Vulnerability Manager™ can help organizations minimize the chances of a network security breach by using a proactive approach to finding security weaknesses and minimizing potential risks. It uses a proven vulnerability scanner to collect up to date results, but unlike other solutions, it leverages the capabilities of Extreme Networks Security Analytics Platform™ to present the data within the overall context of the network usage, security and threat posture.

Extreme Networks Log Manager

Extreme Networks Security Analytics Log Management™ analyzes all the data from various network and security devices, servers and operating systems, applications, and a wide assortment of endpoints to provide near real—time visibility into developing threats and to meet continuous compliance monitoring requirements. With the Extreme Networks Security Analytics Log Management™ flexible query engine, diverse log data is aggregated and correlated into actionable IT operations and security forensics to help identify patterns of attack, anomalies, access and use of confidential data and insider threats. Organizations looking to collect, analyze, archive and securely store large volumes of network and security event logs need a high performance, easy—to—use, and comprehensive log management system. Extreme Networks Security Analytics Log Management™ analyzes all the data from various network and security devices, servers and operating systems, applications, and a wide assortment of endpoints to provide near real—time visibility into developing threats and to meet continuous compliance—monitoring requirements.

Features And Benefits

Delivers superior zero day threat protection and security intelligence. Provides critical insight and visibility into network activity, including encrypted traffic. Integrates with the Extreme Security Analytics G2™ portfolio. Enables granular control of both web and non web applications by users and groups. Reduces cost and complexity through consolidation and reduces bandwidth consumption. Industry leading intrusion prevention and response. Leverages your existing infrastructure investments and IT expertise. Delivers superior zero day threat protection and security intelligence.  Provides critical insight and visibility into network activity, including encrypted traffic.  Integrates with the Extreme Networks Extreme Security Analytics G2™ portfolio.  Enables granular control of both web and non web applications by users and groups.  Reduces cost and complexity through consolidation and reduces bandwidth consumption.  Industry leading intrusion prevention and response.  Leverages your existing infrastructure investments and IT expertise. Features  protection against evolving threats, critical insight and visibility, granular control over network activity, and seamless deployment.