- Nokia's new N97 vs. the iPhone
- 10 Microsoft research projects
- Hard to get justice in MySpace case
- Smartphone smackdown: Storm vs. iPhone
- Apple removes antivirus support page
|
|||||||
FaceTime's system includes an RTGuardian (RTG) appliance, Greynet Enterprise Manager software and IM Auditor software.
Impressively, the RTG 500 caused zero latency as it inspected inbound and outbound Internet traffic for malware and malware references. When it detected unmanaged instant messaging and peer-to-peer protocols (such as Skype) or malware coming over IM or peer-to-peer, the RTG 500 prevented the unwanted computer programs from entering our network by spoofing the source and destination machine addresses to send each session partner a TCP Reset packet. The TCP Reset instructs both sender and receiver to cease the current transfer of data.
FaceTime's use of the TCP Reset packet is extremely clever. The RTG appliance was never a bottleneck, because it doesn't sit inline between the Internet connection and the network. The appliance merely listens to the conversation flow and, when it detects malware, commands the client and the spyware host to halt. In other words, the appliance never has to act as a relay station. While some upstream routers may be programmed to discard the TCP Reset on its way back to the spyware host, you can reconfigure the upstream routers. Most important, the client gets the message to stop requesting the spyware packets.
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment