Security

Multi-layered prevention technology in IBM RealSecure Server Sensor for AIX guards against threats from internal and external attacks.

• Protects AIX servers and applications from known and unknown threats with integrated firewall and vulnerability-centric intrusion prevention
• Simplifies and supports organizational compliance requirements
• Provides data loss prevention and preemptive protection support while enforcing corporate security policies for servers
• Helps ensure system integrity, data confidentiality and policy compliance with internal and external standards
• Provides controls to guard against insider threats
• Integrates seamlessly with existing IT infrastructure to preserve legitimate traffic flows without interruption
• Centrally managed by the IBM SiteProtector™ system
• Supports IBM AIX 6.1, 5.1, 5.2, 5.3 (64-bit and 32-bit)

• Intrusion Prevention System (IPS) and Firewall
  • Uses both signature-based and protocol-based analysis to prevent known and unknown attacks
• Buffer Overflow Exploit Prevention (BOEP)
  • Signature-less technology that looks for and blocks malicious code in the memory buffer overflow
• Compliance
• Provides the reporting necessary to maintain and improve many of the below regulatory compliance regulations by providing historical data that enables companies to find the origin of a change, breach, or string of behavior and tracking the who, what, when, where of user behavior
  • FISMA: Federal Information Management Security Act
  • SOX: Sarbanes-Oxley Act
  • PCI DSS: Payment Card Industry Data Security Standard
  • GLBA: Gramm-Leach-Bliley Act
  • HIPAA: Health Insurance Portability & Accountability Act
  • ISO/IEC 17799 (will become 27002)
  • NIST 800-53: National Institute of Standards & Technology
• Tight access control
  • Application control can lock down user access to programs that may be used to take control of a server and extract customer data or confidential intellectual property
  • Security team alerts to changes in specified files to allow access control and confidential data changes
• Monitoring
  • Provides OS auditing
• Centralized management
  • Secure administration for infrastructure, servers, clients and pervasive devices
• IBM Virtual Patch® technology
  • Automatically applies protection for vulnerabilities before vendor-supplied patches can be installed
• The X-Force® Advantage
  • World-renowned threat and vulnerability intelligence
  • Most comprehensive Vulnerability Database in the world with over 36,000 unique vulnerabilities catalogue
  • Award wining team to research and evaluate threat and protection issues

• RealSecure Server Sensor