We have partnered with leading Network Security vendors that can help secure your organisations and keep your business up and running.  Castleforce can offer support on all the products we offer to our customers.  

Firewalls, IPS/IDS and Remote Access 

We are partnered with a variety of Network Security Vendors from dedicated Enterprise Appliances to Small Business UTM devices and can offer hardware, software and Virtual appliances if needed as well as Open Source offerings.

 Check Point is a leader in network security software, firewall solutions, VPN solutions, endpoint security, network protection, security management, data protection and Pointsec data encryption technologies. Check Point provides leading enterprise, small business and consumer network security solutions. EAL4 Certified Firewalls

 Stonesoft specialise in High Availability Security Appliances including Firewalls, IDS/IPS and SSL VPN in both hardware and virtual appliances.  EAL4 Certified Firewalls

Networking and security solutions from Juniper Networks helps consolidate network security issues for small, medium and large enterprise. Juniper SSL VPN can offer FIPS Security.  The SA4500 FIPS and SA6500 FIPS appliances incorporate a FIPS-certified HSM. The HSM handles cryptographic processing as well as key and certificate management in a hardened, tamper-proof hardware module. The HSM provides the additional benefit of offloading cryptographic processing from the host CPU, thus optimizing overall system performance while adding a physical layer of security. The SA4500 FIPS and SA6500 FIPS appliances also have a tamper evident label that deters physical security breaches and provides visual indication of appliance integrity.

 The MSA security appliance from Celestix is specifically designed for network security, running a hardened version of Microsoft ISA Server 2006.

 SonicWALL provides firewall products with unified threat management services such as network anti-virus, anti-spyware, virtual private networking (VPN), content filtering and other security services.

The XTM family of network security appliances is a new class of performance-driven solutions. Blazing fast throughput combines with advanced networking features to handle high-volume traffic securely - and at an affordable price. Includes a suite of flexible management tools that allows IT administrators to manage security through an intuitive centralized console, command line interface, and web UI.  

It may be tempting to invest in a multi-layered, multi provider, multi-product approach, attempt to protect against each separate danger with a specific and targeted solution. However, that approach comes with unanticipated costs to the implementer, with greatly increased requirements in terms of expertise, training, support, maintenance time and effort. Worst of all, disconnected thinking can also leave unexpected gaps in protection.

Mycroft’s heritage is providing a streamlined, unified approach; combing access from multiple WAN’s such as DII(F), GSI and the Internet that will result in excellent ROI as well as greatly improved security.

 eSoft’s modular protection firewall and gateway appliances have won Best Buy UTM with SC Magazine for the last three years running.  

 SmoothWall have UTM hardware, software and Virtual appliances as well as their well known Open Source project firewall which can be installed on any spare hardware that meets their basic requirements

SIEM and Log Management

Log Management Software

Assuria Log Manager (ALM) is designed to meet the requirements of enterprise wide management of audit logs generated by systems, devices and applications.  ALM is equally applicable to installations with ten systems or tens of thousands of systems. ALM is fully supported running real or virtualised environments.

For more details on Assuria Log Manager

Log Management Appliances

LogRhythm is an enterprise-class application that seamlessly combines Log & Event Management, File Integrity Monitoring and Endpoint Monitoring & Control into a single integrated solution.  It is highly reliable, cost effective and easily scalable across any size enterprise.  With LogRhythm, you can invest in a single solution to address needs and challenges throughout your organization, whether they are related to compliance, security or IT operations.

For more details on LogRhythm Single Integrated Appliances

LogLogic Open Log Management Collect, normalize, index, store, and search log data automatically with our easy-to-deploy appliances or hosted solutions. Rapidly drill down into log details and create detailed reports with our built-in templates. All LogLogic appliances are run on hardened linux appliances that are designed to offer full log processing and archive based on the amount of Event Per Second (EPS) design. 

For more details on LogLogic Log Management Appliances

Log Management SaaS

SureCloud offer Log Management for network devices and servers in an managed service model via their SureGuard vulnerability manager portal.

For more details on the SureCloud SureGuard Log Management service

---

Web Filtering

 Websense products increase web security and employee productivity through internet policy enforcement. Websense also includes managed email services after the aquisition of SurfControl as well as endpoint protection.

 Barracuda Web Filter and Web Application firewall provide hardware appliances that do exactly what they say on the tin. 

 SmoothWall Network Guardian and School Guardian provide a BECTA approved Web Proxy Cache content filteirng hardware and software appliance at a fraction of the price of many of their rivals.  The fully supported corporate and advanced versions of the popular Open Source code is certainly growing in popularity. 

 eSoft provide Web filtering via their web threat pack on both the UTM Instagate and Gateway Appliance R=Threatwall range. 

 Trend Micro were one of the original gateway protection companies and have hardware and software appliances as well a hsoted services and in the cloud protection to help with web content filtering and Antivirus / Antispyware protection against all web threats.

---

Email Protection including Spam Filltering,

Archiving and Encryption

 Trend Micro ScanMail for Exchange and Lotus Notes has always been one of the best groupware security products on the market and Trend have grown other devices into their portfolio including hosted email services, virtual email message scanning appliances and email encryption products.

 Mimecast's Unified Email Management is a single service that integrates with your existing IT to take care of all of your email requirements online, with no hardware, software, or capital expense and it takes just a few days to set-up. By connecting your current email systems to Mimecast, you instantly deliver unified email security, continuity and archiving.

 Mirapoint's RazorSafe is an email archving solution that helps customers facing compliance audits, lawsuits and legal discovery motions, improve user productivity by optimizing email management, and improves business continuity from employee turnover. RazorSafe brings Mirapoint's proven reliability and industry-leading TCO in an appliance architecture and supports all major email servers: Microsoft Exchange, Lotus Notes/Domino, Novell Groupwise, and Mirapoint Message Server  

  C2C Systems Email archiving, file archiving email management solutions for capacity, PSTs, ediscovery compliance for Exchange, SharePoint, Files, Domino & Notes.

 Barracuda Networks' mission is to provide powerful, enterprise-class solutions that are suitable for the largest of businesses yet have the ease of use and affordability that smaller businesses demand.  Barracuda Anti-Spam firewall and Message Archiver applance provide exactly what they say on the tin.

 eSoft email threat pack and email server on the appliance give small businesses greater power and an alternative option to the more expensive alternatives.

---

Antivirus and End Point Protection

 Trend Micro Incorporated is a global leader in network antivirus and Internet content security software and services.

 McAfee proactively secures systems and networks from known and as yet undiscovered threats worldwide.

  provides the leading antivirus  and spyware software in the internet security marketplace. Providing free anti-virus software for scanning PCs. Trial our free antivirus download to beat viruses like trojan.win32, kido and conficker.

 Symantec provides enterprise security solutions for all network tiers: the gateway, the server, and the client level, including PCs, laptops, and handhelds.

 F-Secure is the global market leader in mobile phone protection and end point protection software.

Wireless LAN (WLAN) Security

  Aruba's integrated policy-enforcement firewall, high-security encryption, standards-based authentication, wireless intrusion detection/prevention, and compliance audit reporting assistance meet or exceed the wireless LAN-specific security requirements in PCI DSS. Merchants using an Aruba solution can cost-effectively implement the security controls required for PCI compliance without compromising the performance of business applications or upgrading legacy networks.

---

Product Finder

We developed the following Product Finder module to try and help people find products that fit their requirement.  Simply select a threat rating and a filter type if needed to get some ideas on product selection.

Our friendly and knowledgeable staff are only a phone call away so please contact us if you require further assistance. 

Please rate the threats to your business using the form below.

Threat		Low			High		Threat		Low			High
Virus							Spyware
Spam							Web/IM
IPS/Patch Mgmt							Data/System Mgmt

Filters:

STATION TYPE PC/Laptop Server Mail Server Gateway Smart Phone/PDA PLATFORM TYPE Apple Macintosh Appliance Firewall / VPN Hosted Service Linux Desktop Linux Server Lotus Notes / Domino Mail Protocols Microsoft Exchange Microsoft Mobile & Symbian OS Microsoft Small Business Server Microsoft Windows Microsoft Windows Server Novell Netware Other Mail Server Other Server Web Protocols Wireless BRAND PREFERENCE Assuria AwareGO Boldon James Check Point Extreme Networks Lumension Mycroft Talisen Stonesoft Trend Micro Watchguard

Please use the product finder above.

Authentication

  Cryptocard end-to-end network authentication solutions have been developed to secure every access point to the corporate network.

  VASCO is the leading supplier of strong authentication and e-signature solutions and services specializing in Internet Security applications and transactions. 

 SecurEnvoy have tokenless Two Factor authentication mechanisms for Remote Access, Email and Microsoft Windows password management.

 A unique zero-footprint, strong authentication solution using picture passwords, requiring no special client software or hardware, Tricerion's SafeLogin product is a server-based solution to the problem of account hijacking attacks, such as phishing, keystroke logging, shoulder surfing, etc 

Single Sign On Partners

Evidian Identity and Access Management with dynamic access control and SSO.  Evidian software helps you to deploy a global security policy and service level management capability, through identity and access management and service level management software suites

---

Encryption

 Full Disk Encryption solution from Check Point has proven itself in enterprises and government agencies around the world, delivering the highest level of data security by providing a strong, full-disk encryption solution for PCs and laptops as well as access control. It has the most and highest-level of certifications, works with Linux or Windows and Apple MAC, and provides centralised management of PC data security.

Safend Encryptor enforces an enterprise wide encryption policy to protect the data stored on laptop and desktop hard disks, so that sensitive data cannot be read by unauthorized users in the case of loss or theft. Safend Encryptor utilizes Total Data Encryption technology that automatically encrypts all data files, while avoiding unnecessary encryption of the operating system and program files. This innovative concept minimizes the risk of operating system failure, and has a negligible performance impact. Leveraging this unique encryption technology, Safend Encryptor provides transparent hard disk encryption. 

nuBridges Protect is designed to make it easier for IT to make your operations PCI DSS compliant. Here are just a few examples:

• No database or file layout changes required — encrypt a 16-digit credit card number without changing your pre-defined file layout, your application screens, your reports
• No database downtime during encryption, encryption processes run in the background, allows high availability systems to remain active

Supports two data protection methods:

1. Distributed encryption with centralized key management that does not require a persistent connection between the hub and the spokes – the optimum in performance and availability;
2. Format Preserving Tokenization™ with central data vault

---

Patch Management

  Identify and Patch Software Security Vulnerabilities Quickly with Vulnerability Assessment and Automated Patch Deployment.

Network Access Control

 CounterACT limits non-compliant device access to specified resources, thus enabling users to remain productive while their device-compliance violations are addressed. For example, if a user device is found to have an out-of-date anti-virus (AV) definition file, it can be moved to a VLAN, allowing the user to access email and Internet while blocking the device from other critical resources.  CounterACT can then work with existing services to provide guided remediation and/or cue the AV server to auto-update a specific device. Once remediation is complete and the device is found to be in compliance, complete access to the production network may be granted or restored.

  InfoExpress CyberGatekeeper Network Access Control (NAC) solution hands control back to administrators, through managed access to the network and automatic remediation - Authorized devices can access the network, but rogue devices and unhealthy PCs are blocked.

---

WAN Optimisation

and Bandwidth Management 

 Riverbed, the market leader in enterprise-class wide-area data services (WDS) solutions. Riverbed enables application acceleration, IT consolidation, WAN bandwidth optimisation, and faster WAN backup – all in a single appliance.

---

Storage Management

and Backups

 Acronis is a global provider of storage management software that enables corporations and individuals to move, manage and maintain digital assets. Acronis sells innovative solutions for disaster recovery, server consolidation and virtualisation migration, which allow users to maintain business continuity and reduce downtime in computing environments.

 Symantec backup solutions are probably the most well known in the IT industry following the aquisiation of Veritas and the Backup Exec products in the mid 90s.

Network Device

Backup

 Restorepoint from TADASoft can help you roll back a configuration change, therefore avoiding costly downtime and security risks to your network. Multiple administrators can use Restorepoint to manage configuration backups for a variety of switches, routers, firewalls, proxies and other network appliances from multiple vendors. It’s easy to see how Restorepoint simplifies the tasks of maintaining a healthy and stable  

Network Switches

 

Ethernet switching products from Extreme Networks solve tough network connectivity challenges

With our Ethernet switches, enterprises and service providers can build scalable, highly-available networks that deliver voice and video traffic with clarity. We’ve integrated critical security features directly into the switch fabric and we’ve pioneered the Virtualized Security Resource architecture. Which means you’ll enjoy peace of mind today with the confidence that your network can grow and adapt to your changing needs. At Extreme Networks, it all starts with our switches!