NETSCOUT Case Studies Manufacturer Improves Network Perimeter Defense and DDoS Prevention With Arbor Edge Defense

Edit This Case Study Record

	Manufacturer Improves Network Perimeter Defense and DDoS Prevention With Arbor Edge Defense NETSCOUT

Manufacturer Improves Network Perimeter Defense and DDoS Prevention With Arbor Edge Defense

NETSCOUT

Technology Category	Cybersecurity & Privacy - Intrusion Detection Cybersecurity & Privacy - Network Security
Applicable Functions	Discrete Manufacturing Quality Assurance
Use Cases	Cybersecurity Intrusion Detection Systems Perimeter Security & Access Control
Services	Cybersecurity Services System Integration
Challenge	The company's Security Operations (SecOps) team was facing challenges in securing the network perimeter. The process was largely manual, involving maintaining a rolling list of IP addresses (i.e., blacklist) at the firewall level. Any new IP address potentially viewed as a rogue actor was manually added to the “bottom of the list” by a SecOps resource. This approach was proving to be inefficient due to the vast size of the IP address list, the manual efforts associated with its maintenance, and questions regarding both accuracy and currency. With the company’s network and data center operations growth and the resultant expansion of their threat landscape, SecOps was in need of a next-generation perimeter security solution that would better safeguard business and complement what the nGeniusONE and smart visibility solution was already providing to cross-IT resources. Read More
About Customer	The customer is a U.S manufacturer that produces heavy-duty equipment under multiple brands. The company has production plants in more than a dozen countries and has strived to comply with high-quality industrial standards, which has helped the company maintain their status as a world-class manufacturer. The company’s information technology (IT) team has long used their NETSCOUT nGeniusONE® Service Assurance solution with InfiniStreamNG® (ISNG) and Packet Flow Switch (PFS) technology for real-time packet monitoring at their data center and headquarters locations. In coordination with Network Operations (NetOps), the Security Operations (SecOps) team derived additional value from the company’s investment in NETSCOUT by accessing nGeniusONE analytics and smart data visibility sources for packet-based forensics for incident-related troubleshooting. Read More
Solution	The company transformed its network perimeter defense strategy and automated its DDoS protection from attacks by deploying the NETSCOUT Arbor Edge Defense (AED) solution. With AED, SecOps has automated processes associated with defining both “deny” and “allow” lists at its firewall, leading to enhanced network perimeter security and better protection of the company’s manufacturing business. AED was deployed inline (i.e., between the internet router and firewall) on the same links already being tapped by NETSCOUT to feed network packet traffic to the long-deployed ISNG and PFS smart visibility sources responsible for real-time generation of smart data used by nGeniusONE analytics. In addition to improving network perimeter security and firewall efficiencies, AED equipped SecOps to stop DDoS attacks as large as 40 Gbps. Using NETSCOUT’s stateless packet processing technology, SecOps can also use AED to stop TCP-state exhaustion attacks that target and impact stateful devices, such as next-generation firewalls. Read More Log in to view content
Contents

Technology Category

Cybersecurity & Privacy - Intrusion Detection

Cybersecurity & Privacy - Network Security

Applicable Functions

Discrete Manufacturing

Quality Assurance

Use Cases

Cybersecurity

Intrusion Detection Systems

Perimeter Security & Access Control

Services

Cybersecurity Services

System Integration

Challenge

The company's Security Operations (SecOps) team was facing challenges in securing the network perimeter. The process was largely manual, involving maintaining a rolling list of IP addresses (i.e., blacklist) at the firewall level. Any new IP address potentially viewed as a rogue actor was manually added to the “bottom of the list” by a SecOps resource. This approach was proving to be inefficient due to the vast size of the IP address list, the manual efforts associated with its maintenance, and questions regarding both accuracy and currency. With the company’s network and data center operations growth and the resultant expansion of their threat landscape, SecOps was in need of a next-generation perimeter security solution that would better safeguard business and complement what the nGeniusONE and smart visibility solution was already providing to cross-IT resources.

About Customer

The customer is a U.S manufacturer that produces heavy-duty equipment under multiple brands. The company has production plants in more than a dozen countries and has strived to comply with high-quality industrial standards, which has helped the company maintain their status as a world-class manufacturer. The company’s information technology (IT) team has long used their NETSCOUT nGeniusONE® Service Assurance solution with InfiniStreamNG® (ISNG) and Packet Flow Switch (PFS) technology for real-time packet monitoring at their data center and headquarters locations. In coordination with Network Operations (NetOps), the Security Operations (SecOps) team derived additional value from the company’s investment in NETSCOUT by accessing nGeniusONE analytics and smart data visibility sources for packet-based forensics for incident-related troubleshooting.

Solution

The company transformed its network perimeter defense strategy and automated its DDoS protection from attacks by deploying the NETSCOUT Arbor Edge Defense (AED) solution. With AED, SecOps has automated processes associated with defining both “deny” and “allow” lists at its firewall, leading to enhanced network perimeter security and better protection of the company’s manufacturing business. AED was deployed inline (i.e., between the internet router and firewall) on the same links already being tapped by NETSCOUT to feed network packet traffic to the long-deployed ISNG and PFS smart visibility sources responsible for real-time generation of smart data used by nGeniusONE analytics. In addition to improving network perimeter security and firewall efficiencies, AED equipped SecOps to stop DDoS attacks as large as 40 Gbps. Using NETSCOUT’s stateless packet processing technology, SecOps can also use AED to stop TCP-state exhaustion attacks that target and impact stateful devices, such as next-generation firewalls.

Impact #1	Automated network perimeter defense, enhanced DDoS protection, integration with security stack
Impact #2	Inline solution on network links already tapped by NETSCOUT for packet processing and smart data generation
Impact #3	Improved network perimeter security and firewall efficiencies

Impact #1

Automated network perimeter defense, enhanced DDoS protection, integration with security stack

Impact #2

Inline solution on network links already tapped by NETSCOUT for packet processing and smart data generation

Impact #3

Improved network perimeter security and firewall efficiencies

Download PDF Version

Overview

Manufacturer Improves Network Perimeter Defense and DDoS Prevention With Arbor Edge Defense

Operational Impact