blocks_image
blocks_image
blocks_image
blocks_image
blocks_image
blocks_image
blocks_image
blocks_image
blocks_image
blocks_image
blocks_image
blocks_image
click here to get more information about Arbitrator, or to speak with a layerX representative.

Behavioral Threat Prevention Module
threat-prevention-icon


Arbitrator's Behavioral Threat Prevention module provides day-zero protection against worms, trojans, spyware, malicious scanning, and other malware by identifying and stopping network and system-level attacks at the perimeter and inside your network. By leveraging multiple detection mechanisms combined with real-time behavioral analysis, Arbitrator's Behavioral TPS solution protects against known attacks as well as future attack behaviors.

Intruder Profiling & Trusted System Management
Internal and external device behaviors are continuously tracked and profiled in Arbitrator's IP Profiler. As systems violate security rules they are automatically categorized as suspicious or malicious, depending on the number and severity of security policies they violate. This real-time behavior profiling allows Arbitrator to respond differently based on the trustworthiness of the device.

IPP pic


Real-time Threat Detection
Suspicious or threatening behaviors are identified by Arbitrator's real-time Correlation Engine using a combination of event log, flow information, and real-time environmental data. As threats occur they are easily visualized in Arbitrator's Threat Analysis dashboards, allowing you to watch threats evolve before they become critical. Additionally, new threat rules can easily be added using Arbitrator's Rule Wizard, or you can simply download rule "bundles" from the layerX Storefront.

Proactive Threat Defense
The ability to detect threats is only valuable if the system can proactively respond to threatening behaviors to protect your critical assets. As threats are identified Arbitrator's Response Engine automatically engages to mitigate threats proactively across your network - using your existing protection appliances. With Arbitrator in your network, threatening entities are automatically blocked, redirected, or quarantined, based on their behavior, to ensure your assets are protected.

Real-time Threat Exchange
Arbitrator's real-time threat exchange service, Threat-share™, allows you to share and receive real-time blacklist updates with layerX. When you activate Threat-share, real-time blacklisted IP addresses are added to your IP Profiler - giving you real-time threat visibility beyond the perimeter of your network. Additionally, you can have Threat-share information automatically added to correlation and response rules - allowing you to set up perimeter blocking rules for malicious systems before they reach your network.
blocks_image
blocks_image
blocks_image
blocks_image
Arbitrator complies with Federal Energy Regulatory Commission requirements for security threat detection & prevention (as specified by the FERC CIP for Cyber-Security Regulations), and automates 19 specific FERC security requirements.