SOX News

Patent-Pending LeapFrog Prevention Technology Bolsters Industry-Leading Solution That Validates Compliance for Technical

(Jan 09, 2008)-- Xceedium, provider of solutions that enforce security policy and validate compliance for technical users, announced the availability of Xceedium GateKeeper 4.0, which delivers patent-pending LeapFrog Prevention technology, FIPS 140-2, Level 2 certification and other new feature enhancements. Many Fortune 200 organizations and top government agencies rely on the Xceedium GateKeeper appliance to manage, control, contain, track and report on technical users who need access to mission-critical resources and systems on the network to do their jobs.

"The highly-skilled nature of technical employees' job requirements and the command line tools they use can make it very difficult to track and contain unauthorized activity on the network," said Scott Crawford, a senior
analyst with Enterprise Management Associates. "The LeapFrog Prevention technology featured in the Xceedium GateKeeper solution enables organizations to contain users to authorized areas on the server, and its reporting capabilities are well-aligned with requirements for enforcing security policies and ensuring regulatory compliance."

Xceedium GateKeeper 4.0 provides first-to-market technology that allows companies to protect critical infrastructure by restricting technical users to authorized areas only. Its patent-pending LeapFrog Prevention technology monitors and enforces policy at the socket layer and tracks all activities for these users. When a user attempts to open a socket to another device or server on the network using interactive protocols or commands, GateKeeper blocks use of the protocol to prevent "leap-frogging" to other unauthorized devices.
GateKeeper also generates comprehensive, ad hoc activity alerts, enabling industry requirements and regulations to be met. LeapFrog Prevention technology is available for Windows, Linux, Solaris and AIX.

Many experts believe they must accept security risks in exchange for operational efficiency. Today's controls are typically dispersed, decentralized and inadequate. Xceedium GateKeeper 4.0 delivers new features
and capabilities that provide security controls, compliance validation and increased operations capabilities.
New Features and Capabilities of Xceedium GateKeeper 4.0:

-- LeapFrog Prevention technology: Blocks use of protocols when a user attempts to open a socket to another device or server on the network, to prevent circumvention of authorized access policies.

-- Command Line Keystroke Logging and Session Recording: Tracks all activity in the data center and remote locations as a single, centralized source for comprehensive reporting, enabling compliance with S-OX, PCI, HIPAA, FISMA, GLBA and other regulations.

-- Real-Time Violation Alerts and Remediation: All activities of technical users are extensively monitored and logged. Administrators are alerted to any violation attempts in real-time, and repeated violation attempts
can be met with automatic session shut-down and/or suspension of the user's account.

-- Easy-to-Produce Reporting: Automates the process of auditing and regulatory compliance reporting. Concise-yet-comprehensive reports are generated that meet industry requirements and regulations.

Share or bookmarklet this web page at: