3COM CHIEF TECHNOLOGY OFFICER UNVEILS BI-PLANAR NETWORK VISION; NOVEL APPROACH GIVES ENTERPRISES UNPRECEDENTED NETWORK SECURITY AND APPLICATION PERFORMANCE
In a keynote address today at the 2006 RSA Conference in San Jose, 3Com’s Chief Technology Officer Marc Willebeek-LeMair presented a vision for solving the most pressing issues in modern enterprise networking – comprehensive network security and application performance. The new approach to networking, 3Com’s Bi-Planar Network vision, achieves what today’s network of switches and routers cannot – complete access control, attack control, and application control.
During his presentation, Willebeek-LeMair pointed out that the pain enterprise customers experience today is directly related to the inability to control what users, devices, and traffic are allowed into the network; inability to filter out malicious and unwanted traffic; and inability to prioritize and accelerate business critical applications on a converged IP network. Inadequate security and sluggish applications can severely impede businesses today. When the network stops, business stops.
Willebeek-LeMair went on to say that the lack of control and intelligence in today’s market demanded a new network model. The blurred perimeter, increased IT complexity, evolving threats, and the convergence of mission critical data, voice, and video onto a single IP network creates an inflection point that requires a fundamentally different network approach.
Introducing the Bi-Planar Network
Willebeek-LeMair described his vision for a Bi-Planar Network where a Control Plane is overlaid onto today’s traditional network, which he termed the Connectivity Plane. Today’s Connectivity Plane – comprised of routers and switches – simply directs traffic to its destination, but is not designed to perform the deep packet classification and policy enforcement functions required to meet network security and application performance needs.
In a Bi-Planar Network, purpose-built network control nodes provide the full access, attack, and application control that switches and routers cannot fulfill. These intelligent network control nodes are capable of fine-grain IP flow classification and policy enforcement, and are deployed seamlessly, cost-effectively, and with no change to existing routers, switches, or applications. Customers get the best of both worlds – Connectivity Plane investment protection and future investment focus on the higher value functions that evolve their networks to the next level of business protection and performance.
The Control Plane has the intelligence to thoroughly inspect traffic, classify it, and take an appropriate policy-based action. Each packet flow entering the network from wired, wireless, local, or remote access—whether data, voice, video —is inspected for device, device health, user, and user access rights. Traffic flows are further inspected and handled based on cleanliness, priority, and the need for WAN optimization. Infected devices are quarantined; malicious traffic is filtered out; non-critical traffic is throttled; and mission-critical traffic is prioritized and optimized according to business-driven policies.
Access control provides a uniform network-based method to enforce policy and compliance for all end points based on user, access rights, compliance, and security posture. It also provides a quarantine function for infected devices, so malicious traffic outbreaks cannot spread internally through the network.
Attack control provides deep inspection of each and every packet flow entering the enterprise network, proactively stopping Denial of Service attacks, worms, viruses, Trojans, malware, spyware, and other threats from pervading the network and crippling employee productivity and business operations.
Application control enables enterprises to maximize their connectivity network investment by ensuring high priority applications, including voice and video, are dynamically prioritized and optimized for WAN performance – a critical objective given increasingly mobile and distributed workforces. It also enables businesses to save valuable bandwidth by limiting non-critical traffic, like peer-to-peer file sharing or instant messaging, according to policy.
Open Architecture
Unlike the very stable, mature Connectivity Plane, the Control Plane is where innovation and technical advancements are likely to occur for years to come. To that end, 3Com is introducing its Intelligent Network Control (INC) architecture – an open, multi-vendor architecture that enables Bi-Planar Networks to achieve comprehensive network security and application control through best of breed solution deployments. This flexibility allows customers to add security, application acceleration, or other network control functions in accordance with their business needs, without vendor lock-in. INC is enabled through the INC application programming interface (INC API), an open API that allows the classification and enforcement functions of the network control points to be utilized for other policy enforcement needs.
First generation technology for Bi-Planar Networks is already being deployed today. TippingPoint Intrusion Prevention Systems (IPS) have achieved market leadership in attack control. These powerful systems also provide advanced application control functions, including policy-based protocol throttling, instrumental in bandwidth optimization for many customers. Quarantine Protection, announced Monday, February 13, adds extensive access control to contain infected end points.
3Com also offers a complete portfolio of Connectivity Plane products including routers, switches, and wireless products for small to large enterprise solutions.
To download a white paper on 3Com’s Intelligent Network Control architecture, visit: http://www.3com.com/biplanar_vision/.
Willebeek-LeMair’s keynote address will be available via Webcast at: http://2006.rsaconference.com/us/conference/webcasts.aspx.
About TippingPoint, a division of 3Com
TippingPoint, a division of 3Com, is the leading provider of network-based intrusion prevention systems. The TippingPoint IPS is the most decorated in its industry. For a full list of awards, visit http://www.tippingpoint.com/products_certifications.html. Our innovative approach offers customers unmatched network-based security with unrivaled economics, ultra-high performance, scalability and reliability. TippingPoint is based in Austin, Texas, and can be contacted through its Web site at www.tippingpoint.com or by telephone at 1-888-TRUE-IPS.
About 3Com Corporation
3Com Corporation (NASDAQ: COMS) is a leading provider of secure, converged voice and data networking solutions for enterprises of all sizes. 3Com offers a broad line of innovative products backed by world class sales, service and support, which excel at delivering business value for its customers. Through its TippingPoint division, 3Com is the leading provider of network-based intrusion prevention systems that deliver in-depth application protection, infrastructure protection, and performance protection for corporate enterprises, government agencies, service providers and academic institutions. For further information, please visit www.3com.com, or the press site www.3com.com/pressbox.
For more information, please contact:
Pinyaluck Thanasinmontri
Pr Plus Two Co., Ltd.
Tel. (662) 972 6100
[email protected]
Liana Teo
3Com Asia Pacific
(65) 6213 5990
[email protected] End.