Checkmarq BOS-Series

The Checkmarq Intrusion Prevention System (IPS) is a remote managed security solution that makes Intrusion Prevention available for all companies. The Checkmarq IPS appliance is placed in-line in front or inside your company network. Because the appliances bridge, the appliance can be placed anywhere in a company network without causing additional maintenance. As data passes through the IPS, they are submitted to a deep packet inspection that can determine whether the passing data is legitimate or harmful. By placing a Checkmarq appliance anywhere in your network, there is a instantaneous security for layer 2-7.

Checkmarq also inspects at application level which makes fast and reliable protection from all passing data traffic. The Checkmarq IPS also protects VoIP infrastructure, routers, switches, DNS and other critical infrastructure from malicious attacks, either manual or automated. By keeping unwanted traffic off a company network, Checkmarq provides better functionality within a company network by reducing the unnecessary traffic on the network, thus making the internal speeds higher and making sure of a better performance.

Engine

Checkmarq is very proud of the vulnerability engine that we have developed. Because of a magnificent team of technicians we have been able to make the fastest IPS engine in the world. In the coming year we will be providing our vulnerability engine to other manufacturers for use on their specific systems. Of course Checkmarq will constantly proceed to fine-tune and expand the possibilities of making our engine even faster. One of the most important issues that is being developed is a co-operation with hardware acceleration developers, this will give us even more possibilities in the future.

Checkmarq Vulnerability Data Feed (CVDF)

Our security feed is the most extensive database of vulnerabilities available on the market. Checkmarq specializes in Intrusion Prevention around the clock and there for has the most up-to-date vulnerability feed in the world. Next to being one of the largest databases, with over 3200 rules implemented, we also take pride in being the fastest when it comes to updating our systems with newly discovered vulnerabilities. Because of our extensive experience in Intrusion Prevention we know the problems that can occur when a system is not updated fast enough. Around the clock we have a team of experts on the watch for new known vulnerabilities and emerging problems (zero day exploits). When new issues are detected then our technical research team investigates the issues and if necessary writes a new rule to stop potential threat before it is even made known to the rest of the world.

Our data feed can also be provided to other Intrusion Prevention Solutions as a standard for checking in- and outgoing data traffic. Using the CVDF on a Checkmarq appliance means you get optimal speed because of the push functionality that is provided by Checkmarq. Instead of having to watch for updates and being ready to download it when it is available, Checkmarq provides your appliance with new rules as soon as they have been written. Checkmarq forces the update to the machines that have been placed worldwide and within 2 minutes all machines throughout the world have been updated.

By combining Checkmarq appliances with the CVDF you have a complete managed system that can save you time, money and lots of headaches.

Vulnerability Guard

Checkmarq has implemented a vulnerability guard that is used to filter out all possible attacks that might occur towards a computer or server using any type of vulnerability available. One of the strongest points about Checkmarq vulnerability guard is the fact that we do not only provide towards well known systems, like Microsoft or Novell, but also are concerned about the lesser known systems. Even though the well known system have their problems, the lesser known systems need protecting to. Checkmarq has a team of experts on watch 24-hours a day, looking for possible problems that will arise in the coming period.

A quick explanation of a vulnerability: Problems in software that can be used to gain access to a system, or possibly damage or take off line services, for example web servers, mail servers, etc.

Malware Protection

To be able to explain Checkmarq Malware Protection, we first need to know what Malware is. Everybody has seen them while being online, those websites that when you visit them they ask you to download this, and download that. Well these days there are sites that don't ask anymore, but just upload software when you visit them. This procedure can be compared with the way companies upload cookies to your computer. They are uploaded without you knowing about them, unless you have something that detects them and stops the software from being uploaded.

Now knowing this we need a machine or software that will find these bandits and filter them out. That is why Checkmarq has implemented a Malware feature in their Intrusion Prevention Systems. While we filter out attacks, we might as well filter out Malware too. Checkmarq will filter out all known Malware and report it in your online Management Portal. This means that you do not have to warn your employees, or make special rules to prevent people from visiting the sites.

Remember we can’t stop people going to the sites, but we can prevent the harm that they can do, and you will be able to see who it was that took the risk.

Bidirectional Filtering

Because Checkmarq doesn't believe in only incoming attacks, but also outgoing attacks, either caused by employees or by worms that are already on your network as we speak, we have developed a bi-directional filter. This will protect not only your own network, but will protect the rest of the world from people that use your computers to attack others. The following situation explains what could happen:

If you for example have a sales department that takes their laptop home and connects to the Internet. You as a company are not able to control what somebody does at home! What if this person gets infected while working at home, and doing other stuff than work on his laptop? He comes to work with an infected laptop, and plugs it in to the company network, which is allowed because he is an employee. Bingo, the worm starts to spread internally and before you know it computers are crashing employees can't work and you are losing money by the minute. With bi-directional Filtering you can prevent this from happening, even if you only use a Checkmarq outside of the network, then at least your customers won't notice.

For ordering information, please contact our sales department:

Phone: +31 (0) 26 000 01

Mail: sales[at]checkmarq.net