Alcatel Carrier Internetworking Solutions OmniSwitch 9000 User Manual

Page 8

Advertising
background image

8

Alcatel-Lucent | OmniSwitch 9000

SECURITY

Alcatel-Lucent secures the network with proactive and reactive

capabilities that are provided through Alcatel-Lucent Access Guardian

and the Alcatel-Lucent OmniVista 2770 Quarantine Manager.

The Alcatel-Lucent OmniVista Quarantine Manager is

an open, attack containment solution that defends

against attacks at the network and application levels

by isolating misbehaving users and providing a

means for user remediation. It integrates quarantine

information from any IDS or source of information

about an attack and can locate and isolate an

attacking device on any switch or wireless LAN switch

in the network.

Although third-party switches can quarantine a port,

when the OmniVista Quarantine Manager is used with

an Alcatel-Lucent OmniSwitch it is able to offer options

to either isolate or quarantine only the offending user

while keeping network access to any other users on

the same port open.

Alcatel-Lucent Access Guardian provides identity based

network access to enable enforcement of device and

network security policies, resulting in increased privacy

and availability of communications. Access Guardian

authenticates network users, confirms their PC’s

conformance to security policies, and then provides

access rights based on the user’s role. Using Access

Guardian, the network is able to provide secure access

to all authorized users including IP phones and other

network devices, regardless of the vendor. All while

protecting the privacy and availability of your

business’ communications.

Alcatel-Lucent’s Access Guardian enables proactive, network-wide

security through auto-sense authentication that runs on the OmniSwitch,

preventing unauthorized network access. The Alcatel-Lucent OmniVista

2770 Quarantine Manager provides reactive security by automatically

handling malicious attacks by taking intrusion information and

dynamically reconfiguring the network to contain the attack.

Advertising