Skybox Security upgrades products, builds partnerships

Skybox Security Tuesday announced upgrades to its risk-mitigation and auditing product suite, called Skybox View, along with business partnerships with Internet Security Systems and Application Security.

Skybox View, which runs on any mid-range server, includes the Skybox Secure software for network risk analysis and Skybox Assure for auditing firewalls and validating changes.

The third version of Skybox Assure includes policy-compliance templates to determine whether network devices are configured to meet security policies.

To continue reading, register here and become an Insider. You'll get free access to premium content from CIO, Computerworld, CSO, InfoWorld, and Network World. See more Insider content or sign in.

Skybox Security Tuesday announced upgrades to its risk-mitigation and auditing product suite, called Skybox View, along with business partnerships with Internet Security Systems and Application Security.

Skybox View, which runs on any mid-range server, includes the Skybox Secure software for network risk analysis and Skybox Assure for auditing firewalls and validating changes.

The third version of Skybox Assure includes policy-compliance templates to determine whether network devices are configured to meet security policies.

"The policy compliance rules might state, for example, a common idea such as 'no Internet access allowed to our customer relationship management application,'" says Ed Cooper, vice president of worldwide marketing at Skybox.

Policy-compliance reporting templates in Skybox Assure would also include those aimed at satisfying standards such as the federal government’s FISMA FIPS 200 and the National Institute of Standards and Technology’s 800-53, plus the ISO standard 17799.

The upgrade to Skybox Secure, which allows a network manager to establish a virtual model of a network to determine risk mitigation based on firewall usage, now includes a way to model the network based on use of intrusion-prevention systems as well.

Cooper said this feature was developed with assistance from Internet Security Systems, which makes the Proventia line of IPS products, though he added the IPS modeling is intended to be used with any type of IPS.

The goal is to be able to determine if the IPS is deployed in the appropriate network location, is configured properly and has the correct blocking characteristics turned on.

Skybox Security has formed a partnership with ISS to market and sell Skybox View. Skybox Security also collaborated with Application Security on the third version of its suite by integrating the scanning results of Application Security’s AppDetective vulnerability-assessment scanner for databases into the Skybox View model for risk mitigation purposes.

Purchased separately, Skybox Assure starts at $50,000, and Skybox Secure costs $75,000.