Solera Updates Forensics Tool

PRESS RELEASE

Salt Lake City, UT – Feb. 8, 2011 – Solera Networks, a leading network forensics products company, today announced Solera OS 5.0, a major update to its award-winning network forensics platform. The new OS transforms network forensics, addressing the prevailing urgency IT security must apply to eliminating today’s threats quickly and with insight. New features include application classification, DeepSee' Active Reporting, and DeepSee Maps with geolocation, delivering the most advanced network forensics tool on the market today. The release is currently under beta testing by key enterprise and government customers and will be demonstrated at the RSA Security Conference next week in San Francisco, CA. Solera OS 5.0 includes innovations to improve network situational awareness, enable swift root cause analysis, and promote deterrence and prevention in today’s next generation threat environment.

“The new features in Solera OS 5.0 represent a major evolution of the platform that has been in demand by high-profile government agencies and enterprise customers,” said Steve Shillingford, President and CEO of Solera Networks. “This is truly a breakthrough in Network Forensics technology. For the first time customers have complete, real-time visibility to pinpoint security issues without compromising on performance or the accuracy of the event description. This comes on the heels of our just-released DeepSee App for Splunk and further represents our commitment to provide organizations the tools they need to detect and defend against the onslaught of sophisticated, ever-changing threats.”

Solera OS 5.0 powers the high-performance Solera DS™ line of network forensics appliances. These appliances are like surveillance cameras for the network to help address today’s next generation threats, including: insider threats, botnets, malware, security breaches, or prolonged, targeted attacks. They go beyond dated packet capture or network sniffer technologies to also collect, classify, visualize, and recreate every bit of data, even on today’s ultra-fast networks, physical or virtual.

“The new features in Solera OS 5.0 give us an unprecedented view into the network and data, which helps us respond to security events in a fraction of the time required before,” said Alex Holden, Director of Enterprise Security at Cyopsis, an IT security firm. “The application classification features help us to find the types of data we are looking for like email addresses and Google search queries. If insiders are breaking the rules, it’s pretty easy to discover. We have been using the features in beta and we’re impressed with how Solera Networks innovates and advances the industry with this release.”

Solera OS 5.0 key additions include:

• Application Classification and Description – Network traffic is classified into 28 different application families and 490 specific applications, with up to 5000 descriptive details collected. Security professionals have a vivid picture and context to all traffic on their network.

• Solera DB v2 – The next generation of our patented capture technology with highly efficient compression now increases the amount of data that can be stored in the same physical space by a factor of 10-to-1.

• DeepSee Active Reporting – Active reporting gives users the power to work with results as they are returned in real-time. This provides quicker time to resolution by discovering an incident in the early stages of an investigation.

• Geolocation: DeepSee Maps and Google' Earth Integration – Visually see traffic patterns and identify concentrations of traffic to and from locations of interest. Abnormal or suspect traffic is easily recognized and serves as the starting point of an investigation.

“Enterprise security teams recognize that when it comes to protecting their networks, knowledge is power,” says Johna Till Johnson, President and Senior Founding Partner, Nemertes Research. “The first step in protecting against an attack is understanding its characteristics—and if this happens quickly enough, the attack itself can be prevented.”

The software is the result of extensive security research and feedback from IT customers working to keep networks secure from threats like Operation Aurora, the Stuxnet worm, ZeuS botnets, and insider threats amplified by Wikileaks. Solera Networks’ objective is to continually deliver innovations to defend against next generation threats without compromising on performance, usability, or value.

Solera OS 5.0 will be generally available in May 2011 on recently upgraded Solera DS hardware appliances or as a virtual appliance and showcased at RSA