HP Raises the Bar for Securing NT-Based E-Services; WebEnforcer First to Continually Monitor and Enforce Windows NT Web-server Security

Business Wire, Jan 17, 2000

High Tech Writers

RSA Conference 2000

SAN JOSE, Calif.--(BUSINESS WIRE)--Jan. 17, 2000

Hewlett-Packard Company today introduced HP Praesidium WebEnforcer for NT, a new solution for securing Windows NT(R) Web-server environments that, for the first time, monitors and enforces security on a continuous basis to protect e-business solutions.

HP Praesidium WebEnforcer protects key components of the NT Web-server platform. It can save enterprises money by automatically eliminating known security vulnerabilities, implementing security best practices, monitoring the integrity of security settings and enforcing those settings when unintended changes are detected.

With hundreds of potential security vulnerabilities in a typical out-of-the-box Windows NT installation, and many new ones discovered each day, HP Praesidium WebEnforcer for NT and the HP SecurityUpdate subscription service can save IT professionals and security contractors thousands of hours researching and manually closing these vulnerabilities.

"HP is breaking new ground by addressing security vulnerabilities in Windows NT Web-server environments with this new comprehensive solution for dynamic security monitoring and policy enforcement," said Dennis Szerszen, director of Security Strategies at Hurwitz Group. "Because all key components of the environment, including operating system, Web server and transaction server, are protected with a single integrated security solution, there is no need for IT administrators to buy and integrate a collection of point products. This could save months of effort, enabling administrators to quickly deploy an essential e-business security solution."

"WebEnforcer addresses the growing need by corporate IT professionals for a comprehensive, cost-effective Windows NT security solution that offers ongoing protection," said Roberto Medrano, general manager of HP's Internet Security Division. "WebEnforcer adds to the HP Praesidium portfolio of security solutions to provide enterprises with the essential security they require to enable their Windows NT-based e-services solutions."

HP WebEnforcer for NT protects Microsoft(R) Windows NT Server, IIS Web Server, Transaction Server, Index Server, Script Host, Data Access Components and Internet Explorer against hundreds of known security breaches. WebEnforcer's unprecedented monitoring and enforcement capabilities keep a constant eye on the integrity of security settings; triggers alarms when unauthorized changes are detected; and resets configuration settings if they have been changed, either maliciously or, as often happens, as the result of installing new software. The HP SecurityUpdate subscription service provides ongoing protection against the latest security breaches and newly discovered threats and vulnerabilities.

WebEnforcer disables system services and subsystems that may become security vulnerabilities; secures DCOM permissions and remote registry access; secures hundreds of registry settings; assigns appropriate user rights; and secures files, folders and literally hundreds of other vulnerabilities potential intruders might exploit.

WebEnforcer does not require security expertise or operating-system modifications and is extremely easy to install and integrate with existing applications and processes. Wizards guide the process of creating and activating security profiles based on security and compatibility requirements, and profiles can be exported to other servers for rapid deployment. Four preset security-profile templates simplify installation and setup, and provide a starting point for creating customized security profiles.

Availability and U.S. Pricing

HP Praesidium WebEnforcer for NT is available now for $2,995 per server. The HP SecurityUpdate subscription service, which includes technical support, is $695 per year.

About HP's Internet Security Division

The Internet Security Division delivers best-in-class e-security software that makes enterprise, ISP and ASP Internet applications safe for electronic business. The Praesidium product portfolio includes VirtualVault, the world's most widely trusted Web-server platform; DomainGuard Access and DomainGuard Rules, powerful Web authorization managers; Authorization Server, the only enterprise authorization manager that protects both Web and non-Web applications; the Extranet VPN; and the e-Firewall. HP's pace-setting security products, solutions and consulting services help businesses deploy innovative new applications and e-services more quickly and securely at a lower cost. More information can be found at http://www.hp.com/security.

About HP

Hewlett-Packard Company -- a leading global provider of computing and imaging solutions and services for business and home -- is focused on capitalizing on the opportunities of the Internet and the proliferation of electronic services.

HP plans to launch Agilent Technologies as an independent company by mid-calendar 2000. Agilent consists of HP's test and measurement, semiconductor products, chemical analysis and healthcare solutions businesses, and has leading positions in multiple market segments.