Disclaimer: This information comes from sources that cannot be verified. As such, make no assumptions about its completeness or accuracy. We endeavor to keep this information up to date as much as possible. Feel free to send comments/ updates to the Security News Editor.

November 17, 1997, Section: Top Of The Week

Security Boost For Check Point Firewall

By Beth Davis

Internet Security Systems Inc. is tying its intrusion-detection tool to Check Point Software Technologies Ltd.'s firewall to provide real-time protection against outside attacks on corporate networks.

When ISS's RealSecure detects an attack, such as Internet Protocol spoofing, it can automatically reconfigure Check Point's Firewall-1 to terminate the connection from the suspicious IP address. The software add-on to RealSecure will be available later this quarter. Pricing hasn't been determined.

Chii-Ren Tsai, a Reston, Va.-based chief security architect with Citibank, says he's interested in intrusion-detection tools like RealSecure. But he notes that on-the-fly reconfiguration of firewalls can be risky. Because it becomes difficult to determine who initiated an IP spoofing attack, he says, "we might accidentally shut down a customer's connection instead."