Skip Links

Network World

  • Social Web 
  • Email 
  • Close
Clear Choice Test: VoIP Analysis
Introduction | Complete scorecard | Test archive
Inside this test package
Anti-malware Product-by-product summary
Also:

FaceTime Enterprise Edition

By Barry Nance , Network World , 09/18/2006
  • Share/Email
  • Comment
  • Print

FaceTime's system includes an RTGuardian (RTG) appliance, Greynet Enterprise Manager software and IM Auditor software.

Impressively, the RTG 500 caused zero latency as it inspected inbound and outbound Internet traffic for malware and malware references. When it detected unmanaged instant messaging and peer-to-peer protocols (such as Skype) or malware coming over IM or peer-to-peer, the RTG 500 prevented the unwanted computer programs from entering our network by spoofing the source and destination machine addresses to send each session partner a TCP Reset packet. The TCP Reset instructs both sender and receiver to cease the current transfer of data.

FaceTime's use of the TCP Reset packet is extremely clever. The RTG appliance was never a bottleneck, because it doesn't sit inline between the Internet connection and the network. The appliance merely listens to the conversation flow and, when it detects malware, commands the client and the spyware host to halt. In other words, the appliance never has to act as a relay station. While some upstream routers may be programmed to discard the TCP Reset on its way back to the spyware host, you can reconfigure the upstream routers. Most important, the client gets the message to stop requesting the spyware packets.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed