Provide Cost Effective Regulatory Compliance with Riverbed Cascade (formerly Mazu)

For many companies, protecting sensitive customer information such as Personal Credit Information (PCI), requires extensive deployments of hardware for intrusion detection and/or prevention. For others, the cost of audits that prove that unauthorized persons did not have access to regulated data is burdensome. These organizations need the ability to cost effectively monitor both external and internal access to regulated resources and provide historical data stores of such access.

Riverbed Cascade uses network flow data collected from existing sources within the infrastructure, enhances that data with sophisticated grouping, and active directory information, and performs both policy based and behavioral based analysis on network activity to identify instances of access to controlled resources. Cascade provides compliance sensitive users with the following benefits:

• The ability to leverage existing network devices as a source of intrusion detection mitigating the need for expensive remote deployments
• User Defined Policies and custom resource grouping to monitor access of regulated resources by authorized and unauthorized users
• Anomaly detection that can pick up authorized users exhibiting unique behaviors such as accessing a controlled data store and sending data to remote sites
• The ability to easily prove that only authorized users accessed regulated assets in the last year

Cascade enables User Defined Policies that automate the monitoring of access to regulated assets

Riverbed Cascade combines the best approaches to monitoring, analysis, reporting, and alerting in one highly automated solution. Cascade incorporates advanced Network Behavior Analysis (NBA) technology. Cascade's NBA implementation is the most advanced in the industry allowing customers to implement automated network and application monitoring and analysis with a significantly reduced burden on expert operations staff. Cascade's unique User Defined Policies, allow users to easily construct advanced monitoring and control policies to avoid known contributors to degraded performance. These technologies combine to reduce the number of false positive alerts or 'alarm noise' common to threshold based monitoring systems. Additionally, Cascade provides rich contextual information for each alert that allows a) help desk staff to solve more problems and more correctly route escalated tickets; and b) expert staff to identify the root cause of performance issues more quickly shaving as much as 75% off of the time spent troubleshooting.

Cascade's unique capabilities enable our customers to significantly streamline operational planning and troubleshooting workflows across multiple operations teams. The most common use cases include:

• Managing the WAN to accelerate business applications
• Assuring robust delivery of critical business applications
• Minimizing the risk of datacenter moves
• Reducing the cost of regulatory compliance

Cascade in Action

A global hospitality company operates 900 properties around the world in which numerous users access Personal Credit Information. According to their systems integrator, PCI compliance mandated the deployment of $3000 IDS devices in each location. The company's reaction was ‘even if the devices were free, we couldn't afford to deploy and maintain them'. They were able to use Cascade to collect network flow information from branch routers already deployed at each property. Enhance with active directory data, business grouping of their PCI servers and User Defined Access policies, they were able to achieve compliance for 1/8th the cost proposed by the integrator.