Clear Packets, Clear Packets logo and FMS-Enterprise Gateway are trademarks of Clear Packets, LLC
All other names, URLs, websites, companies and products listed herein are trademarks or registered trademarks of their
respective owners, holders or manufacturers.


Plano, Texas. Nov 2, 2008 -- The need for looking at network security from long-term point of view
has been greatly highlighted by discovery of Sinowal trojan in huge number of corporate networks all
around the world.
"The effect has been really global with over 2000 domains compromised," said Sean Brady of RSA's
security division. He told the BBC: "This is a serious incident on a very noticeable scale and we have
seen an increase in the number of trojans and their variants, particularly in the States and Canada."
The full article published by BBC is available here. A copy of the article is available here.
This study greatly enforces need of having the network activity data stored for past weeks, months and
even years for future auditing. As this high profile security breach highlights, it is sometimes not possible
to detect a trojan or malware for quite sometime because the hackers have planned everything very
well. But as detection techniques become available through collaborative effort of security researchers,
it is extremely vital for individual corporations to be able to check and verify if their networks have been
breached and take appropriate actions accordingly.
Clear Packets FMS-Enterprise Gateway has been purpose built for this type of long term security
requirement. It stores each and every network activity for every single day, 24/7/365 and the storage of
data has been so carefully designed that it costs about $1/user/year. In other words, storage device cost
to store entire year's network activity information for one user is about one US dollar. System enables
quick queries to search for specific activity and look for suspicious network activity, using data
becoming available from security researchers.
For the Sinowal trojan like security breach, using the control and command (C&C) center network
addresses of a trojan, administrator can see if there was any data transmitted from inside the network to
a hackers network and eliminate the guesswork if their network has been breached.
Clear Packets continuously updates filters to block out C&Cs, Bots, Zombies using data from world's
best internet watchdogs and any attempts by a compromised machine inside the network is not only
blocked but also recorded for every single day, 24/7/365 providing up to date single screen view of
security breach attempts so the network administrator can take action. Security breach attempt
information is also available for long term auditing. Full details on FMS-Enterprise Gateway are
available here.
About Clear Packets, LLC
Clear Packets, based in Plano, Texas, designs, develops and sells integrated business productivity and
security solutions. Clear Packets versatile and powerful multi-services platforms solve many common
problems faced by businesses of all sizes everyday and are simple to use and manage.
For further information, visit www.clearpackets.com or contact Clear Packets at 972-325-1966 or
info@clearpackets.com.
Sinowal Trojan Greatly Reinforces Need for Long-term Network Security Planning
|