University of Manchester Chooses StealthWatch to Improve Network Management

  • Apr 28, 2009

Lancope, Inc., the provider of the StealthWatch® System, today announced that The University of Manchester has chosen the StealthWatch to monitor network behavior, detect network incidents and identify affected machines and users. NetFlow-based StealthWatch reduces total network and security management costs for The University of Manchester.

As Britain's largest single-site university, The University of Manchester has 35,000 students and more than 11,000 staff. The network includes 15,000 campus PCs, plus 11,000 more computers in residence halls. Two data centers house highly available systems to provide business applications, e-mail, Web access, storage and more. The University of Manchester's Directorate of IT Services is responsible for centralized IT services and support, as well as local services for faculty teams.

"We have a large, complex network with a lot of unmanaged desktop machines," said Tony Arnold, IT Security Coordinator for The University of Manchester. "We knew viruses, bots and Trojans were hitting the network and that a significant amount of illegal file sharing was occurring, but we had no tools to detect unwanted or anomalous behavior. Nor did we have any tools that could analyze the type of traffic on our network."

After spending weeks investigating and resolving an incident involving suspiciously high traffic levels to and from certain network services, The University of Manchester IT staff realized it needed a solution for improved network visibility. First they investigated intrusion prevention systems (IPS), but soon realized that IPS technology could not provide a holistic view of the campus network without a huge expense.

"Khipu Networks, our Lancope reseller, suggested network behavior analysis technology and arranged a trial of StealthWatch," said Arnold. "We found StealthWatch so useful right away; it delivered exactly what we wanted, so we decided to deploy it on our network."

The University of Manchester uses the StealthWatch Xe for NetFlow collector appliance to gather high-speed traffic information from each of the University's six core routers for analysis by the StealthWatch Management Console. The University of Manchester also relies on the StealthWatch IDentity appliance to link individual users with specific network events for increased user accountability and faster, more immediate insight into unexpected network and security events.

With detailed visibility insight into network traffic patterns, link utilization and overall network performance, StealthWatch dramatically accelerates network and security troubleshooting.

Prior to StealthWatch, investigating network events was a cumbersome, time-consuming process. "Individual system administrators had to manually gather information from their system and then come together to correlate behaviors in an attempt to pinpoint the source of the problem," said Arnold. "Now we simply access the StealthWatch Management Console for a consolidated view of network traffic and behavior. The system is incredibly flexible and tunable as well."

Using StealthWatch, The University of Manchester IT staff has spotted trouble on the network before it was noticed anywhere else. And, it has saved valuable time in identifying specific users who have accessed a particular system.

According to Arnold, "StealthWatch will improve our customer service and keep us more proactive when it comes to addressing network behavior and security incidents."

"Khipu Networks partners with Lancope because we see StealthWatch as a 'no-brainer' solution for any organization seeking holistic network visibility and performance management without the cost and complexity of deploying in-line technologies. Furthermore, StealthWatch easily scales to accommodate any network throughput, which for Universities sector often means Gigabit and more," said Vil Dhutia, commercial consultant for Khipu Networks. "The University of Manchester relies on StealthWatch daily, highlighting the need among all Universities for non-intrusive network behavior analysis."

"Universities maintain large, complex networks that require continuous visibility and control, but often lack the resources necessary for optimal network performance and security demands," said Harland LaVigne, president and CEO of Lancope. "We designed the StealthWatch System to help institutions, like The University of Manchester, optimize security, network and virtual operations while maximizing limited resources. The University of Manchester joins more than 60 other academic institutions across 25 countries in recognizing StealthWatch network behavior analysis as an integral part of a complete security and network management strategy."

Featured

  • From Surveillance to Intelligence

    Years ago, it would have been significantly more expensive to run an analytic like that — requiring a custom-built solution with burdensome infrastructure demands — but modern edge devices have made it accessible to everyone. It also saves time, which is a critical factor if a missing child is involved. Video compression technology has played a critical role as well. Over the years, significant advancements have been made in video coding standards — including H.263, MPEG formats, and H.264—alongside compression optimization technologies developed by IP video manufacturers to improve efficiency without sacrificing quality. The open-source AV1 codec developed by the Alliance for Open Media—a consortium including Google, Netflix, Microsoft, Amazon and others — is already the preferred decoder for cloud-based applications, and is quickly becoming the standard for video compression of all types. Read Now

  • Cost: Reactive vs. Proactive Security

    Security breaches often happen despite the availability of tools to prevent them. To combat this problem, the industry is shifting from reactive correction to proactive protection. This article will examine why so many security leaders have realized they must “lead before the breach” – not after. Read Now

  • Achieving Clear Audio

    In today’s ever-changing world of security and risk management, effective communication via an intercom and door entry communication system is a critical communication tool to keep a facility’s staff, visitors and vendors safe. Read Now

  • Beyond Apps: Access Control for Today’s Residents

    The modern resident lives in an app-saturated world. From banking to grocery delivery, fitness tracking to ridesharing, nearly every service demands another download. But when it comes to accessing the place you live, most people do not want to clutter their phone with yet another app, especially if its only purpose is to open a door. Read Now

  • Survey: 48 Percent of Worshippers Feel Less Safe Attending In-Person Services

    Almost half (48%) of those who attend religious services say they feel less safe attending in-person due to rising acts of violence at places of worship. In fact, 39% report these safety concerns have led them to change how often they attend in-person services, according to new research from Verkada conducted online by The Harris Poll among 1,123 U.S. adults who attend a religious service or event at least once a month. Read Now

Most   Popular

New Products

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis.

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.