NETWORKS

Metanetworks Technologies announces the deployment of its MTP-10G and MTP-2G Intrusion Detection and Prevention PCI cards in SCinet – the massive network supporting the 2005 International Conference for High Performance Computing and Communications (SC|05). Selected for their wire-speed performance on Gigabit and 10 Gigabit Ethernet, the MTP cards will be used as key components for accelerating SCinet’s network security and monitoring infrastructure at SC|05. SCinet will deliver over 500 billion bits/second (Gbps) aggregate WAN transport to show exhibitors. It is expected to supply more than 50 10-Gbps links with 15 to 18 10-Gbps links to be used simultaneously by some participants. To maximize performance, there will be no firewalls. In this regard, SCinet is a temporary extension of the open Internet and is subject to cyber attacks. The SCinet environment is especially challenging from a network security and monitoring prospective both for its extreme speed and openness. The MTP-10G and MTP-2G cards are particularly suited for SCinet’s demanding environment. These versatile PCI cards forward 10 and 1 Gigabit traffic between their two Ethernet ports with approximately 1 microsecond latency while performing wire-speed, stateful, packet inspection. When determining whether to capture or block packets, the cards can apply hundreds of stateful policies per packet. Users can install up to six cards in a single host, resulting in an unprecedented total IDS/IPS capacity of up to 60 Gbps per machine (at least 10 times greater than any existing IDS or IPS). The MTP-10G and MTP-2G cards support existing, open-source network security and monitoring applications. They accomplish this by specifying capture and filtering policies using public-domain IDS signatures or standard network monitoring libraries. The powerful yet flexible MTP Application Program Interface (API) allows network security professionals to create custom security and monitoring applications that go beyond a pure signature-based approach. The MTP-10G and MTP-2G cards interface with the host operating system as standard NICs and can seamlessly run a variety of standard application software at much faster speeds. For example, open-source Snort IDS software can monitor a few hundred megabits of traffic with a standard NIC. With the MTP-10G card, Snort can sustain monitoring 10 Gbps of traffic without modification, a capability many times greater than any existing IDS or IPS. The MTP-10G and MTP-2G cards are also compatible with other popular libpcap-based network monitoring applications such as tcpdump.