Free Newsletter
Register for our Free Newsletters
Access Control
Deutsche Zone (German Zone)
Education, Training and Professional Services
Government Programmes
Guarding, Equipment and Enforcement
Industrial Computing Security
IT Security
Physical Security
View All
Other Carouselweb publications
Carousel Web
Defense File
New Materials
Pro Health Zone
Pro Manufacturing Zone
Pro Security Zone
Web Lec
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor

Virtualisation Technology Features In New Security Service Platform

Qualys : 15 February, 2011  (New Product)
Cloud security applications delivered using a service model from Qualys have been unveiled at the RSA show
Qualys has introduced its next generation Security-as-as-Service platform to host the QualysGuard IT security and compliance Software-as-a-Service (SaaS) suite of applications in the cloud.

The new Qualys security-as-a-service platform provides an integrated framework with new state-of-the-art functionality in all Qualys security and compliance applications. Standards-based integration and middleware ties together the browser, all Qualys applications, six platform services and engines, the user’s security and compliance data, scanners, and the QualysGuard KnowledgeBase.

With the new platform, users will get prioritized job management, modular services to ensure highest uptime and performance, dynamic analysis and reporting capability, and support for physical and virtual appliances – from Qualys or deployment by other cloud solution providers.

“This new backend and injection of open source technologies combined with the Web 2.0 front end has been in the making for over two years,” said Philippe Courtot, chairman and CEO for Qualys. “Unlike with enterprise software, our SaaS implementation allows us to bring these new performance capabilities and major enhancements transparently to our existing users.”

The new Qualys platform is operational today for Malware Detection 1.0 and SECURE Seal 1.0, and it will be in the Web Application Scanning (WAS) 2.0 Beta (see related release). Migration of QualysGuard Vulnerability Management (VM), Policy Compliance (PC) and PCI Compliance solutions will occur in phases throughout 2011 in a transparent manner to all subscribers.

The new platform uses cutting-edge open source and commercial technologies, including a Web 2.0 user interface (UI) and a Java-based backend infrastructure. The browser integrates with the platform’s backend via a standard JSON API and Web Services API. These provide the interface to all Qualys IT security and compliance applications. Platform services and engines include Reporting & Dashboard, Questionnaire & Collaboration, Remediation & Workflow, Correlation & Risk Calculation, and Alerts & Notification. The platform’s data layer includes modules for Scan Management & Scheduling, Indexing & Tagging, and Data Management & Security. In turn, these integrate with internal and external scanners, virtual or hardware scanners, and the QualysGuard KnowledgeBase hosted in Oracle RAC DB.

New technologies implemented in the new platform include:

    * Multi-dimensional, extremely fast, clustered data indexing and tagging using Apache Solr.

    * Powerful and customizable reporting engine using BIRT for multi-format output.

    * Web-scale application clustering using Terracotta and Ehcache technologies.

    * Direct Web Remoting (DWR) services-based dynamic UI using powerful JavaScript Sencha EXT components.

    * SOAP and REST based XML web services for high volume API interaction.

The integration benefits of the new platform will touch all security and compliance applications hosted by the platform, including:

    * New UI with dynamic and interactive interfaces, wizards and new report templates to present scan data with wide range of presentation options to match users’ needs

    * New customizable template-driven reporting engine outputs reports in a variety of formats (csv, doc, xls, pdf, xml, ppt) based on users’ criteria.

    * Fast searching of several extensive Qualys data sets, including scan results, asset data, scan profiles, users, vulnerabilities and more.

    * Patent-pending technology for hierarchical dynamic asset tagging and role-based user access.

    * Dynamic distribution of scans on multiple scanners based on availability and load to optimize scanning of large networks, drastically reducing the overall scan time required to complete large scan jobs.

    * Virtualized scanning platform for enterprises, consultants and cloud-based environments (see related release).
Bookmark and Share
Home I Editor's Blog I News by Zone I News by Date I News by Category I Special Reports I Directory I Events I Advertise I Submit Your News I About Us I Guides
   © 2012
Netgains Logo