Symantec Expands Managed Security Services

The new monitored and managed intrusion-prevention system (IPS) service will be optimized to work with Symantec Network Security 7100 series appliances. It also will support technologies from Symantec competitors, including ISS, Juniper Networks, TippingPoint Technologies, McAfee and Cisco Systems.

Symantec's new approach enables solution providers to upgrade their offerings from intrusion-detection technology to intrusion prevention and provide solutions for customers with just about any product, said Jonah Paransky, senior manager for security product management at the company.

"This ensures that we are supporting choices our customers are making around technical implementations of all kinds," he said of the vendor agnostic strategy. "With this, there's literally no kind of IPS we can't manage."

Specifically, the new managed IPS service offers solution providers a variety of models for helping customers block security threats. The "in-line passive" mode is for customers still testing IPS devices. The "in-line industry best-practice blocking" mode is for customers that want their IPS devices configured to industry best practices.

There also is a "block all" mode and an option for customizing IPS settings, Paransky said.

As part of the new service, Symantec also has updated the Global Emerging Threat notification program to include support for IPS technologies. With the help of select solution providers, customers can use this new feature to roll out supported device signatures on an "emergency" basis to ensure a timely response to critical emerging threats.

Pricing for the new managed IPS solution varies depending on the level of service. Paransky said that current customers of Symantec's managed IDS solution can upgrade for free.