Esphion   Solutions & Products News & Events Customers Partners Company Resources

Press Releases

July 4, 2003

ICONZ deploys Esphion’s netDeFlect to proactively protect its network

Esphion a leading provider of Network Intelligence solution today announced that ICONZ, one of New Zealand’s largest Internet Service Providers has deployed Esphion’s Network Intelligence solutions to proactively analyse and monitor its network traffic and protect its network against Denial of Service attacks and network worms like SQL Slammer.

"After completing trials of Esphion’s netDetail and netDeflect solutions we could see the significant benefits of having on-line real time analysis of our network traffic" said Sean Weekes General Manager of ICONZ "they enable us to immediately identify and detect anomalies and resolve any issues quickly before they impact our customers and the services that we provide to them"

Utilising leading edge anomaly detection algorithms, netDeFlect gives early warning (within seconds) of the onset of the attack, performs real-time pattern analysis of the attack traffic and yields actionable information for blocking the attack.

In a recent survey conducted by the Computer Security Institute and the FBI - Denial of Service has jumped in the last 12 months to become the second most expensive computer crime with losses of US$65.6million being reported vs US$18.4m in the previous report. "Based on these numbers and the trends we are seeing ICONZ has taken a very important step in protecting their ability to provide services to their customers" said Greg Cross - CEO of Esphion.

Esphion, which is based in Massey University’s eCentre in Albany, has spent the last 3 years developing nTAIS a highly scaleable architecture capable of delivering carrier grade security and traffic analysis solutions. With nTAIS every single IP packet can trigger an update to tens of thousands of statistics with data capture being performed at gigabit speeds without impacting network performance

The provision of Network Intelligence ensures that Esphion's customers are "enabled to better manage the integrity, visibility and availability of their IP infrastructure" said Greg Cross, CEO of Esphion "ensuring they get real time visibility into any sudden changes in their traffic models as well as assisting customers to analyse and report on the business implications of their network traffic"

About Esphion
Esphion provides solutions that are focused on analyzing IP network traffic so that its customers can understand the business implications of their networks performance on-line in real-time. Esphion’s netDeflect and netDetail applications enable business users to mange procurement costs, monitor Service Levels, forecast requirements and allocate costs at the same time as they help network operators protect their networks against traffic anomalies such as DDoS attacks. Funded by TMT Venture Partners Esphion is based in Auckland, New Zealand.

For more information, please visit http://www.esphion.com

About ICONZ
ICONZ is pleased to support Esphion and is the third largest business ISP in New Zealand established in 1992. ICONZ is dedicated to providing a large range of business services and products such as managed hosting solutions, managed security solutions, 24x7 monitoring, management of network configurations and virtual private network and including remote/ on-site network management.

For more information, please visit http://wwww.iconz.net

Contacts
Greg Cross - Esphion
gcross@esphion.com
+64 21 417799
Sean Weekes - ICONZ
ssw@iconz.net

 

The solution
The web hosting company installed netDeFlect, Esphion’s patented network security solution. A single, standalone netDeFlect agent was deployed, connecting to the company’s two data centres to provide the new layer of DDoS protection.
To provide early warning of any build-up in traffic, the agent’s sensor is connected to a series of Layer 3 switches located upstream of the company’s border routers, as close to the boundary with its ISP as possible.

At the first detection of a possible DDoS attack, netDeFlect produces a fine-grained attack signature which is applied in the form of an access control list (ACL) to the Layer 3 switches. This is then used to block all traffic originating from the source of the DDoS attack (regardless of whether the addresses are spoofed) before it reaches any critical network infrastructure.

The immediacy offered by netDeFlect has helped to dramatically reduce the average resolution time for a network attack to just five minutes. Perhaps more importantly, by adding this proactive layer of defense the web hosting company has been able to improve service and ensure a greater ability to maintain service levels for its customers, regardless of network anomalies.

Esphion is there to detect anomalous behavior in your unique network environment - we don't care whether it is an attack that has a name and a signature or not - if it is determined to have the potential to disrupt your network we will provide you a solution to block it before it does. Think of us as a highly intelligent virtual network and security engineer watching network links 24x7x365.
Mark Edwards, CEO, Esphion