The InformationWeek -- Blogs

Security

Topics:   Security : Startup City : Virtualization

  • Email this page E-mail this page
  • Print this page Print this page
  • Bookmark and Share
  • icon

Firewall for Virtual Machines Adds Speed and an IDS


Posted by Andrew Conry-Murray, Jul 20, 2009 12:33 PM

Startup Altor Networks launches a new version of its VM firewall that's built for speed and includes an intrusion detection engine from Sourcefire.


Altor Networks, an InformationWeek Startup 50 company has launched a new version of its software firewall for virtual machines.

Altor version 3 supports VMware's VMsafe API. With this support, the firewall can run as a module on a VMware hypervisor itself, rather than as a separate virtual machine. Running on the hypervisor improves firewall performance. According to CEO Amir Ben-Efraim, the firewall can support up to 10Gbits/sec of throughput.

The hypervisor passes all packets to Altor v3 ahead of a virtual switch so the firewall can enforce policy. The firewall supports multiple policies for each VM that runs on the physical server.

In addition, the company has integrated the Snort IDS engine and signatures from Sourcefire. The company opted to use the commercial version to get immediate access to new signatures from Sourcefire. At present the IDS is alert-only. The company plans to provide a blocking option later in the year.

Unlike the firewall, the IDS engine runs as a separate virtual machine, so the firewall has to pass packets up to the engine for inspection, which may affect performance. In addition, the company licenses the full signature set, so administrators may want to tune the IDS to weed out inappropriate signatures.

« IBM's Green Shoots: Government, Healthcare, India | Main | T-Mobile G1 Gets Android Update, But 'Donut' Is A No-Show »



Sign Up Now
For InformationWeek News Alerts




This is a public forum. United Business Media and its affiliates are not responsible for and do not control what is posted herein. United Business Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.

Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of United Business Media LLC and may be edited and republished in print or electronic format as outlined in United Business Media's Terms of Service.

Important Note: This comment area is NOT intended for commercial messages or solicitations of business.




 
 

  1. Detecting Scalability Problems With Intel Parallel Universe Portal
  2. Just Say No To SFAQL Parallelism
  3. QuickThread: A New C++ Multicore Library


Join The InformationWeek Group On LinkedIn


                           


  1. AT&T's iPhone Stranglehold Ending June 2010?
  2. Will Android Survive?
  3. Top Wireless Turkeys Of 2009
  4. Apple Steps Into AT&T-Verizon Ad War


  1. 'Godfather Of Spam' Gets Four Years In Prison
  2. Senators Urge EU To Finish Oracle-Sun Probe
  3. Microsoft Issues Internet Explorer Security Advisory
  4. Amazon Boosts Kindle Features
  5. Google, TiVo Partner For TV Data
  6. Feds To Sharpen Cybersecurity Job Policies

 

  Ars Technica
Boing Boing
Channel 9 Forums
CRN Blogs
Dr.Dobb's Portal: Blogs
Engadget
Gizmodo
GrokLaw
  Lifehacker
Schneier on Security
Slashdot
TechCrunch
Techdirt
Techmeme
Valleywag

  DECEMBER 2008
NOVEMBER 2008
OCTOBER 2008
SEPTEMBER 2008
AUGUST 2008
JULY 2008
JUNE 2008
MAY 2008
  APRIL 2008
MARCH 2008
FEBRUARY 2008
JANUARY 2008
DECEMBER 2007
NOVEMBER 2007
OCTOBER 2007
SEPTEMBER 2007