Anti Reconnaissance Appliance

Camouflage and Protect Your Network

Route undesireable traffic to Ally, NOT into your network! Once rerouted into Arxceo Ally's active anti-reconnaissance engine

• Undesireable traffic is 'trapped'
• Arxceo provides modified replies to these network probes
• It hides your real information
• It hides the fact that they have been discovered
• Arxceo's technology works in realtime
• Doesn't use any defined lists of good or bad IP addresses

Arxceo's anti-reconnaissance technology implements a passive responder, an active detection and reaction module and finally an aggressive blackhole response engine to provide the most robust defense against attackers and worms.

According to SC Magazine reviewer, Peter Stephenson, "In a field where a mid-range product can cost around $26,000, the real standout was a product that measured about eight inches long, looked like a square orange tube and cost $900. It was the only product we tested that performed flawlessly in all areas ... It is simple to deploy and configure and requires very little administration ...add in its excellent performance and the Ally ip100 is our Best Buy for small networks."

ÞDue to customer demand for protecting laptop connections while away from the office, every Ally ip100 can now be powered from the USB port of a PC or laptop.

Anti-Reconnaissance Countermeasures

• Arxceo's patent-pending Tag-UR-IT® technology confuses reconnaissance results of attackers
• Industry tests show a 0.0% chance of attackers predicting the sequence numbers of connection IDs for the range of hardware and operating systems protected by an Ally
• The results of various reconnaissance tools return different information to further delay or thwart a scouting session
• Results change from session to session when using the same tool repeatedly

Worm Mitigation

• Worms enter the network from the Internet, an email attachment, unsecured wireless networks and a myriad of other methods
• They propagate across your network by scanning for other machines to infect
• The Ally appliances stop the propogation and the scans and prevent the spread of worms

Protocol Fortification

• The Ally fortifies network protocols
• Eliminates abuses such as covert channeling, DNS cache poisoning, fragmented packet 'exploit injections' and raw-frame Ethernet data leak transmissions
• Provides a hardened network stack guarantee for every device protected by an Arxceo Ally appliance

Transparent IP Address Authentication

• The Ally transparently authenticates end-user TCP connections
• Doesn't require any client software to communicate or authenticate the session
• Authentication eliminates address spoofing, which is a common method used in both network reconnaissance and network attacks - including many of the Denial of Service abuses