Network Security
A well-connected, high performance network is key to most organizations. Companies face huge challenges in balancing the need for an efficient, secure network that protects their data with ensuring that network costs are reasonable.
Calsoft Labs’ Network Security Services provide customers with a networking environment that they can count on whilst keeping the costs of maintain and operating their networks down to a reasonable minimum.
Our offerings in the Network Security space include:
Stateful Inspection Firewall: Calsoft Labs’ Stateful Inspection Firewall is rule based and filters traffic at three levels. The rules may be based on specified application, session, packet filtering, etc. Unknown traffic is disallowed up to the level 3 of the stack. As the Stateful inspection firewall tracks each packet state, it increases in efficiency.
Intrusion Detection and Prevention: Calsoft Labs’ Intrusion detection and prevention systems (IDPS) focuses on identifying possible incidents, logging information about them, attempting to stop them, reporting them to security administrators, identifying problems with security policies, documenting existing threats, and deterring individuals from violating security policies.
Intrusion Detection System detects and Intrusion Prevention System prevents unauthorized access. Both the network based and host based methodologies of IPS are supported.
IPSEC, SSL VPN Technologies: Calsoft Labs’ IPSec VPN service provides mobile users the ability to gain access to broader, LAN-based computing resources, while simultaneously building IPSec tunnels with business partners.
End-Point Security: Calsoft Labs offers comprehensive endpoint security with many integrated security capabilities including unique browser security, Remote Access VPN and Full Disk Encryption and more. We have integrated endpoint and network security capabilities including built-in Remote Access VPN, Network Access Control (NAC), and optional event correlation and reporting. Additionally we offer:
- Real time Analysis and Prevention, Security Policy Enforcement
- Application Check, Registry Control, Antivirus , Antispyware Single Sign-on
- Integration with Security Gateways, VPNs, Firewalls
Messaging-Email Security : For Messaging and Email security, Calsoft Labs has integrated third generation encryption technologies into the security platform to enable instant-on security for confidential, regulated, business prudent communication. Additionally, our solution includes features such as reliable read recipients, secure replying and forwarding, message expiration, message recalling etc.
Anti-Virus / Anti-Spam / Anti-Spyware : Our solution incorporates an advanced filtering system and other innovative security tools with the help of antivirus, antispyware and antispam software. The solution has highly configurable logging and reporting services and delivers comprehensive protection against today’s highly malignant malware.
Unified Threat Management : Calsoft Labs' Unified Threat Management solution provides a robust, integrated security layer that allows customers to guard against the most sophisticated of threats.
Technical Information :
1. Ingress Packet Processing
- Firewall- Statefull Inspection
- SSL
- IPSCEC Decrypt
2. L2/L3 Processing
- Fragment Handling
- Order Mgmt
- NAT processing/ALGs
- QOS
3. Security Filtering
- URL/Content Filtering
- Intrusion Detection (IDS)
- NAT processing/ALGs
- AntiVirus
4. Egress Packet Processing
- Policy Enforcement
- IPSEC Encrypt
- IPS
Policy Management and Enforcement : Calsoft Labs’ Policy Management and Enforcement solution helps organizations achieve better end-to-end control of services-based applications by eliminating random runtime policy definitions. We provide a policy library that can be customized, automatic policy provisioning, efficient policy viewers and other attractive features. This enables operators to implement real time service authorization and session management. The solution also helps in prioritizing applications, service or connection based services for QoS, subscriber preferences and on-demand requests.
NP Based / Multi-core Packet Processing Architectures: Calsoft Labs’ expertise in Network Processor based/Multi-core packet Processing Architectures includes:
- Packet Processing / Data Plane software Development
- Wire Speed Security Implementations
- Control Plane Software Interface
- Broadcom, Intel IXP, Marvell, Cavium Expertise
- Use Crypto Accelerator, Use NP Tree Search, Hashing Capabilities, Packet Processing Capabilities
- L2 Forwarding, IP Forwarding, Traffic Engineering, Deep Packet Inspection, High Availability Implementations
Identity Management and Enforcement : Identity Management is a collection of services, technologies, methods and concepts that manage identified items within an organization and its network. Calsoft Labs' Identity Management and Enforcement solution identifies individual streams of traffic on a per-user and per-application basis, allowing policy enforcement of QOS and security as well as service quality logging. It provides visibility and control to service providers and includes traffic management, content filtering, etc.
Our Identity Management Product Expertise includes Sun IDM and Oracle Security IDM
We have also vast experience in Identity Management Technologies such as LDAP, SAML, Web2.0 and Project Liberty Standards.
Vulnerability Assessment and Management : Calsoft Labs' Vulnerability Assessment & Management solution continually scans networks for vulnerabilities and new rogue technology devices. . Our complete, comprehensive solution minimizes network downtime due to threats and helps secure networks by identifying threat agents that can exploit vulnerabilities in a customers network. It carries out compliance testing and operational availability analysis and classifies new vulnerabilities based on probability of success of exploitation and potential damage.
DPI and Content Filtering : Our Deep Packet Inspection and Content Filtering solution performs content analysis of network packets at line speed. It identifies individual streams of traffic on a per-user and per-application basis, allowing policy enforcement of QOS and security as well as service quality logging. Essentially, the solution provides visibility and control to service providers and includes traffic management, content filtering, etc.


