Sourcefire 3D® System

Intelligent Security Infrastructure for Efficient and Effective Risk Management

With wireless equipment, mobile employees, outsourced workers, and virtual environments, today’s networks are highly dynamic. Attackers have gotten smarter as new threats continue to grow in number and sophistication. Organizations attempt to use static defenses to defend their dynamic networks against dynamic threats, but network breaches continue to occur.

What today’s organizations need is a new, dynamic approach to securing critical information on the network. An approach that constantly adapts to new threats, new vulnerabilities, and everyday changes to the network.

IT Security must know more about emerging threats. They must know more about new vulnerabilities. And they must know more about the assets and users they are protecting. By knowing more, organizations can optimize network security, reduce risks, and gain efficiencies never seen before.

Introducing the SourceFire 3D System — an intelligent security infrastructure for efficient and effective risk management.

Purpose-Built Appliances

The award-winning Sourcefire 3D System is comprised of two purpose-built appliance product lines—Sourcefire Defense Center™ and Sourcefire 3D Sensors:

Sourcefire Defense Center™ is a powerful, yet easy-to-use centralized management console that correlates threats against network and vulnerability intelligence. Defense Center provides centralized command and control of Sourcefire 3D Sensors, including centralized event aggregation and 3D Sensor policy administration.

Sourcefire 3D® Sensors are fault-tolerant, purpose-built appliances available with throughputs from 5Mbps up to 10Gbps. 3D Sensors passively aggregate network and user intelligence while defending the network against internal and external threats. Each 3D Sensor is capable of running Sourcefire IPS™, RNA, RUA, and NetFlow Analysis modules.

3D Sensor Modules

Each Sourcefire 3D Sensor is capable of running any combination of the following four software components:

Sourcefire IPS™ (Intrusion Prevention System) provides best-in-class intrusion detection and prevention by harnessing the power of the industry-standard Snort® rules-based detection engine. Backed by the acclaimed Vulnerability Research Team (VRT), Sourcefire affords its customers unrivaled protection against known and zero-day threats.

Sourcefire RNA™ (Real-time Network Awareness) passively monitors your network 24x7 to deliver real-time, comprehensive network intelligence, including operating systems, services, applications, protocols, and potential vulnerabilities that exist on your network. RNA automates key IPS functions while fueling additional Sourcefire Enterprise Threat Management (ETM) solutions, including Network Visibility, Network Behavior Analysis (NBA), and IT Policy Compliance.

Sourcefire RUA™ (Real-time User Awareness) pairs Active Directory and LDAP usernames with host IP addresses involved in security and compliance events. RUA dramatically reduces the time needed to uncover user identity and contact information by 95% or more. This empowers IT to resolve security and compliance incidents more quickly, when time is of the essence.

Sourcefire NetFlow Analysis is an optional component of Sourcefire’s NBA solution. By aggregating and analyzing NetFlow from routers and switches, NetFlow Analysis affords IT Security additional means for uncovering inside threats and Network Operations additional means for evaluating bandwidth provisioning and troubleshooting network outages and performance degradations.