University of Manchester Chooses StealthWatch to Improve Network Management

Lancope, Inc., the provider of the StealthWatch® System, today announced that The University of Manchester has chosen the StealthWatch to monitor network behavior, detect network incidents and identify affected machines and users. NetFlow-based StealthWatch reduces total network and security management costs for The University of Manchester.

As Britain's largest single-site university, The University of Manchester has 35,000 students and more than 11,000 staff. The network includes 15,000 campus PCs, plus 11,000 more computers in residence halls. Two data centers house highly available systems to provide business applications, e-mail, Web access, storage and more. The University of Manchester's Directorate of IT Services is responsible for centralized IT services and support, as well as local services for faculty teams.

"We have a large, complex network with a lot of unmanaged desktop machines," said Tony Arnold, IT Security Coordinator for The University of Manchester. "We knew viruses, bots and Trojans were hitting the network and that a significant amount of illegal file sharing was occurring, but we had no tools to detect unwanted or anomalous behavior. Nor did we have any tools that could analyze the type of traffic on our network."

After spending weeks investigating and resolving an incident involving suspiciously high traffic levels to and from certain network services, The University of Manchester IT staff realized it needed a solution for improved network visibility. First they investigated intrusion prevention systems (IPS), but soon realized that IPS technology could not provide a holistic view of the campus network without a huge expense.

"Khipu Networks, our Lancope reseller, suggested network behavior analysis technology and arranged a trial of StealthWatch," said Arnold. "We found StealthWatch so useful right away; it delivered exactly what we wanted, so we decided to deploy it on our network."

The University of Manchester uses the StealthWatch Xe for NetFlow collector appliance to gather high-speed traffic information from each of the University's six core routers for analysis by the StealthWatch Management Console. The University of Manchester also relies on the StealthWatch IDentity appliance to link individual users with specific network events for increased user accountability and faster, more immediate insight into unexpected network and security events.

With detailed visibility insight into network traffic patterns, link utilization and overall network performance, StealthWatch dramatically accelerates network and security troubleshooting.

Prior to StealthWatch, investigating network events was a cumbersome, time-consuming process. "Individual system administrators had to manually gather information from their system and then come together to correlate behaviors in an attempt to pinpoint the source of the problem," said Arnold. "Now we simply access the StealthWatch Management Console for a consolidated view of network traffic and behavior. The system is incredibly flexible and tunable as well."

Using StealthWatch, The University of Manchester IT staff has spotted trouble on the network before it was noticed anywhere else. And, it has saved valuable time in identifying specific users who have accessed a particular system.

According to Arnold, "StealthWatch will improve our customer service and keep us more proactive when it comes to addressing network behavior and security incidents."

"Khipu Networks partners with Lancope because we see StealthWatch as a 'no-brainer' solution for any organization seeking holistic network visibility and performance management without the cost and complexity of deploying in-line technologies. Furthermore, StealthWatch easily scales to accommodate any network throughput, which for Universities sector often means Gigabit and more," said Vil Dhutia, commercial consultant for Khipu Networks. "The University of Manchester relies on StealthWatch daily, highlighting the need among all Universities for non-intrusive network behavior analysis."

"Universities maintain large, complex networks that require continuous visibility and control, but often lack the resources necessary for optimal network performance and security demands," said Harland LaVigne, president and CEO of Lancope. "We designed the StealthWatch System to help institutions, like The University of Manchester, optimize security, network and virtual operations while maximizing limited resources. The University of Manchester joins more than 60 other academic institutions across 25 countries in recognizing StealthWatch network behavior analysis as an integral part of a complete security and network management strategy."

Featured

  • It's Show Time

    I am one of those people that likes to see things get bigger and better. As advertised, ISC West is going to be bigger (more exhibitors) and better (more attendees). It’s show time in Las Vegas. Read Now

    • Industry Events
    • ISC West
  • SIA Releases New Report on Operational Security Technology

    The Security Industry Association (SIA) has released an impactful new resource – Operational Security Technology: Principles, Challenges and Achieving Mission-Critical Outcomes Leveraging OST. Read Now

  • Cyber Overconfidence Is Leaving Your Organization Vulnerable

    The increased sophistication of cyber threats pumped by the relentless use of AI and machine learning brings forth record-breaking statistics. Cyberattacks grew 44% YoY in 2024, with a weekly average of 1,673 cyberattacks per organization. While organizations up their security game to help thwart these attacks, a critical question remains: Can employees identify a threat when they come across one? A Confidence Gap survey reveals that 86% of employees feel confident in their ability to identify phishing attempts. But things are not as rosy as they appear; the more significant part of the report finds this confidence misplaced. Read Now

  • Mission 500 Debuts Refreshed Identity Ahead of Security 5K/2K at ISC West

    Mission 500, the security industry’s nonprofit charity dedicated to supporting children in need across the US, Canada, and Puerto Rico, has unveiled a refreshed brand identity ahead of ISC West. The charity’s new look includes a modernized logo with refined messaging to reinforce Mission 500’s nearly decade-long commitment to serving the needs of children and families in crisis. Read Now

    • Industry Events

New Products

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • ComNet CNGE6FX2TX4PoE

    The ComNet cost-efficient CNGE6FX2TX4PoE is a six-port switch that offers four Gbps TX ports that support the IEEE802.3at standard and provide up to 30 watts of PoE to PDs. It also has a dedicated FX/TX combination port as well as a single FX SFP to act as an additional port or an uplink port, giving the user additional options in managing network traffic. The CNGE6FX2TX4PoE is designed for use in unconditioned environments and typically used in perimeter surveillance.