Q1 Labs' QRadar Links With Juniper Networks' Unified Access Control Solution To Combine Network Access Control and Infection Control; Infection Control Capabilities Also Conform To Trusted Computing Group's Trusted Network Connect™ Initiative

Business Wire, Sept 14, 2006

WALTHAM, Mass. -- Q1 Labs, a leading network security management company, today announced that its QRadar(TM) network security management platform will add Infection Control capabilities in support of the Juniper Networks, Inc. Unified Access Control (UAC) solution and Trusted Computing Group's (TCG) Trusted Network Connect (TNC) open standards initiative.

The Juniper Networks UAC solution conforming to the TNC standards enables organizations to control access to network resources based on the adherence of end systems to security policies. The combination of Q1 Labs' QRadar and Juniper's UAC solution adds infection control capabilities to network-based access control. Q1 Labs Infection Control is a solution based on TNC specifications that enables communication between its QRadar platform and other TNC partners, such as Juniper's Unified Access Control solution, using the IMV specification. In the initial deployment with Juniper Networks' UAC solution, QRadar will communicate with Juniper's Infranet Controller, the UAC solution's policy server, when it detects a security incident or when anomalous network behavior occurs after trusted endpoints have been granted access to the network. With this information, the Infranet Controller can granularly quarantine an offending endpoint/user by controlling access to networks, resources and applications as well as providing intelligent remediation capabilities, including updating the endpoint's security posture and restoring access once the user returns to compliance. The information that the QRadar platform leverages to signal the Infranet Controller about anomalous behavior on the network includes logs and alerts from heterogeneous security devices on the network, including Juniper's entire range of firewall and IDP platforms. This solution ensures that enterprises can leverage the Juniper Networks Infranet Controller, with QRadar, to help ensure compliance, defeat threats and protect their network investments for as long as the user accesses network resources.

"Once endpoints gain trusted connection to the network, there need to be mechanisms that monitor the behavior and security of those devices," said Tom Turner, vice president of marketing for Q1 Labs. "QRadar will detect infections and problem behavior that network connection policies can't anticipate and, in doing so, provide a truly end-to-end solution for network security access control and infection control."

"Linking access control and infection control solutions enables enterprises to leverage their heterogeneous network investments to deliver end-to-end protection for enterprise networks," said Karthik Krishnan, product line manager at Juniper Networks. "Juniper Networks and Q1 Labs are leading the industry by linking these two critical functions in a standards-based fashion."

This represents the second phase of Q1 Labs' interoperability with the Juniper Networks Infranet Controller; QRadar already correlates Infranet Controller logs and alerts with other event and network flow information to incorporate access control data with its enterprise threat management and policy compliance views.

About The Juniper Networks Unified Access Control Solution

Juniper's unified access control solution solves the problem of balancing access and security controls, and provides flexible, dynamic LAN Access Control to networks, resources and applications based on user identity, endpoint integrity and location information. Juniper's Unified Access Control (UAC) solution is comprised of several elements, including the Infranet Controller, which serves as a centralized policy manager; the UAC Agent, which is dynamically downloadable endpoint software (please note that an agentless mode is also available for use where a download of any kind is not feasible, such as on guest devices) that combines endpoint security assessment and enables authentication/authorization; and enforcement points that encompass any of Juniper's best-selling firewall/VPN platforms, including Juniper secure router FW/VPN appliances and Juniper's Integrated Security Gateways with IDP modules. The wide variety of Enforcer platforms allows deployment flexibility from smaller firewalls to protect printer farms to 30Gbps models to enforce policy in the most traffic-intensive settings.

About QRadar

QRadar goes beyond traditional security information/event management (SIEM) and network behavior analysis (NBA) products to create a command-and-control center. QRadar combines, analyzes and manages an unequalled set of surveillance data--network behavior, security events, vulnerability profiles and threat information--to empower enterprises to manage business operations on their networks efficiently from a single console. Easy deployment, business-relevant data and the control to enforce network security provide substantial advantages in performance, operations and cost. More information about QRadar is available at: http://www.q1labs.com/products/prod_overview.html

About TCG