News & Events: Press Releases - May 21, 2007
Q1 Labs Introduces New Application Profiling Capabilities for Network Behavior Analysis
Enhanced Layer 7 Knowledge Provides Increased Visibility into Today’s Dynamic Network Applications
INTEROP – Las Vegas –May 21, 2007 – Q1 Labs, a leading network security management company, today announced a new version of QFlow, its enhanced application layer network analysis solution. This latest release provides increased visibility into the vast number of business applications appearing across an expanded network. QFlow helps organizations better identify these applications for behavior analysis and security monitoring.
Traditionally NetFlow and other native standards were built into the existing network infrastructure to enable the identification and subsequent monitoring of applications via the port from which they communicate. QFlow goes beyond these traditional sources to enable very granular application-layer flow analysis and anomaly detection. It also accurately identifies applications regardless of the port on which they communicate and enables operators to capture application content for deeper security and policy forensics.
“Q1 Labs continues to innovate in the area of Network Behavior Analysis and overall network security surveillance for the converging network and security environment,” said Brendan Hannigan, COO for Q1 Labs. “With this new release, QFlow customers will receive even greater visibility into their network applications and the ability to more effectively monitor and track alerts on application policy or security violations.”
With this release, users can now accurately identify over 800 applications running on their networks including ‘session-based’ applications like VoIP and multi-media which have historically been very hard to profile and monitor from a security perspective. QFlow’s application knowledge means that network and security operators can now enforce very granular security monitoring rules and policies for their mission-critical applications.
The combined enhancements in this latest QFlow release include:
- A larger number of applications will now be identified out of the box (from 400 to 800) covering applications and protocols for IPv6, Voice Over IP and Multimedia, Groupware, Database and ERP
- New state-based logic to track session-based services like VoIP and multimedia (applications that have been hard to identify in the past because of multiple, dynamic protocols)
- Better sub-classifications of traffic for improved detection rules and forensics including Web traffic (HTTP) and audio file traveling over HTTP
"Focusing on layers 2 through 4 is no longer sufficient for network security monitoring,” said Jon Oltsik, senior analyst at Enterprise Strategy Group. “By providing very accurate and very granular layer 7 visibility, Q1 Labs is helping customers to safely roll out and subsequently monitor their critical networked applications.”
Pricing and Availability
The new QFlow software will be delivered in the Q1 Labs family of QFlow collectors, appliances that are deployed at strategic points within the network to monitor flow-based communications.
QFlow collectors start at $9,300.