The industry’s best network anti–recon protection

Contour Networks acquired Arxceo—an award–winning security company—and incorporated this proprietary technology into the AirJack.

Arxceo’s patented technologies, PnPro™ and Tag-UR-IT™, significantly enhance network protection in today’s environment. All Arxceo appliances implement these technologies to provide the most robust anti–reconnaissance technology in the industry—providing anomaly–based attack prevention while stopping attackers and worms from probing your network.

Plug & Protect™ (PnPro)

• Because it has no TCP/IP or MAC address, it cannot be targeted or exploited.
• Provides quick deployment: 15–minute installation.
• No configuration changes required to any other devices.
• 100% compatible with other network hardware and software.

Tagged Universal Resource Information Transmission™ (Tag–UR–IT)

• Anomaly and behavior–based detection—no signatures needed.
• Tags, inspects and preprocesses packets before forwarding onward; hardens network traffic before it enters your network.
• Provides protocol enforcement, anti–spoofing protection, and anti–reconnaissance.
• Stops Denial of Service attacks (DoS, DDoS, DRDoS, etc) along with “slow and low” network recons—even preventing bouncescans from succeeding.

Anomaly–based security
Arxceo’s PnPro feature offers the highest level of connectivity protection without complex configuration or management. And all of this simplicity comes with improved overall network throughput—a security breakthrough. As the AirJack rapidly performs its protocol fortification, exploit eliminations and packet filtering tasks, it also cleans up and eliminates a large amount of noise, freeing up bandwidth so that firewalls and servers can focus on the job they do best.

Anti–recon countermeasures
Tag–UR–IT technology confuses attackers’ reconnaissance. Industry–leading tests show a 0.0% chance of attackers predicting the sequence numbers of connection IDs for the range of hardware and operating systems protected by this proprietary technology. Furthermore, the results of various reconnaissance tools return different information to further delay or thwart a successful network scouting session. Results even change from session to session when using the same tool repeatedly.

Worm mitigation
Worms can find their way into a network from the Internet, an email attachment, unsecured wireless networks and a myriad of other methods. From these, worms propagate across your network by scanning for other machines to infect. These scans are stopped in their tracks by the Ally IP1000, preventing the spread of worms across the different segments of your network.

Protocol fortification
The AirJack fortifies network protocols, eliminates abuses such as covert channeling, DNS cache poisoning, fragmented packet ‘exploit injections’ and raw–frame ethernet data leak transmissions. This fortification provides a hardened network stack guarantee for every device protected by an Arxceo–enhanced appliance.