Using patented technology to analyze and correlate high-volume data streams, High Tower brings revolutionary advances to the network security market with its TowerView™ security event management appliance.
Network security devices, such as firewalls, routers and intrusion detection systems form the first line of defense to your organization’s network. But depending on the configuration and vulnerabilities of your systems and network, they require constant analysis, review, and vigilance to ensure that attacks and compromises are thwarted.
Unfortunately, network administrators can quickly get bogged down with an overwhelming amount of data from innocuous network traffic, and assessing information from real attacks can be like looking for a needle in a haystack.
TowerView™ solves this problem by acting as your 24/7 security intelligence manager, continuously analyzing event data from all network security devices across the enterprise in real time, correlating anomalous events, and giving you immediate, actionable results that allow you to head off any type of attack as soon as it starts. TowerView’s automated notification system displays critical issues in an intuitive 3D display that quickly isolates problem areas, or can forward email or pager alerts around the clock as needed. Armed with intelligent network event correlation, you can now mitigate threats within seconds rather than hours or days — long after your systems have been compromised.
Key Features & Benefits: More security for your network by allowing incident response in seconds rather than hours or days. More efficiency for your network administrators who no longer have to spend countless hours searching aimlessly through log files. Easily deployed and maintained rack-mounted appliance that can be managing your network security in under an hour.
The TowerView appliance correlates and analyzes data from a wide array of security devices in real time as events take place. Using patented analytic technology, the system learns, and then filters out normal network activity and false positives to generate a clean, concise view of active threats. And unlike other security event management systems, TowerView applies high-level analytics to the entire event stream, allowing the appliance to identify true zero-day attacks automatically, without the need for specific signatures.
Speed is essential for security administrators; another advantage of TowerView is that the system does not need to write data to a database before it can correlate information, analyze it, and generate its alerts. TowerView is built on patented technology developed at Jet Propulsion Laboratory and is capable of analyzing large volume data streams in true real-time, as the information arrives, saving security administrators critical time in detecting and responding to malicious activity.
Security alerts are displayed on High Tower’s proprietary 3D data monitoring system and notifications can be sent to email, pagers, or cell phones — allowing security administrators to instantly respond to critical and anomalous events from around their network and expedite remediation.
Automated Notification - TowerView’s automated event notification system is designed to get the information from the escalated incidents into the hands of network administrators as soon as possible, around the clock, and wherever they are. The default notification is through the patented CyberGrid™ 3D display which shows the entire network view, including where network threats are arising, as well as where mitigation should be addressed. Network alarms are readily visible, and allow for triage and prioritization of issues from across the organization. Alerts can also be sent via email to portable devices so administrators are always up to speed.
A Scalable Solution in a Secure Rack-mounted Appliance - TowerView can scale to address nearly any size corporate network, while still providing correlation of events from all devices within one analytical engine, in one rack-mounted appliance. TowerView comes in two sizes, the TowerView 1000 and 2000, to address small to medium-size networks, and large networks respectively; because TowerView runs on its own appliance, deploying it is simple and you don’t need an additional DBA to service the installation.
TowerView accepts events from all Cisco security devices including PIX firewalls, routers and NIDS, Checkpoint Firewall-1, Netscreen Firewall, Snort IDS, and a range of other devices, software and appliances.
High Tower Software
26970 Aliso Viejo Parkway
Suite 200
Aliso Viejo, CA 92656 USA
Toll free: 877-HI TOWER
Tel: 949-330-3080
Fax: 949-330-3081
