A L C AT E L 3 >
entire Alcatel network infrastructure so that the user cannot get access to any sensitive
resources even if he moves and changes his physical port. Once in the quarantine area, the
infected device still maintains network connectivity for remote remediation. After remediation
is completed, the AQE will let the network administrator move the “cleaned” device out of
quarantine.
The benefits of AQE
The AQE receives input from an intrusion detection system
(IDS), automatically locates the source of the attack on the
network, and then automatically creates the quarantine
policy to be applied at the edge of the network, the point of
entry for the attack. The automatic process reduces the need
to have a network engineer create and apply a policy
(VLAN, ACL) to manage network access, which minimizes
the need for manual configuration and application of
network user policies.
Furthermore, AQE does not require any additional network software or hardware beyond
the basic Alcatel switch from a network infrastructure viewpoint, it is fully interoperable with
other vendors’ switches, and is flexible to accommodate a wide range of IDSs, protecting
the customer's investment.
Once implemented AQE reduces operating expenses, automates configuration of edge-port
security parameters, works on wired and wireless infrastructure, and implements quarantine
policies throughout the network edge providing secure user mobility with minimal
configuration changes.
Why Alcatel?
Ask your current vendor if they can automatically contain a rouge, infected, or misbehaving
device then isolate it. Ask if they allow for the offending device to keep a network
connection for remote remediation. Ask if they keep offending users in quarantine when they
try to connect somewhere else in the network or if they leave it to hang until someone from
IT can get around to manually cleaning and inspecting the offending device.
Only Alcatel provides policy-based, network-wide responses to security attacks enabling
secure mobility over its network infrastructure. And, just like self-help kiosks in airports, it
allows users to be mobile while being able to identify the security threats. The dangerous
users are segregated to areas where they can remediate and resume their regular activities.”
To find out more about how Alcatel’s AQE can automatically protect your network, contact
your local Alcatel representative or visit: www.alcatel.com/enterprise
Alcatel’s trusted network intrusion prevention
through network response.
Automated Quarantine Engine
