How Network Masking Helps

Network masking is a proactive network defence because it can be deployed in advance to protect against the next attack. It masks the presence and identity of critical network devices (itself being device agnostic) and so is effective against Zero-day attacks.

Masking is accomplished by modifying network packets at wire speed while maintaining full compatibility and performance. This causes common unauthorized network mapping methods to yield useless or misleading results. The attacker must then choose to give up or risk detection by taking more time and using more “noisy” mapping techniques which are more easily detected and repelled by intrusion detection and prevention systems (IDS / IPS) teamed with network masking systems.

Network mapping enhances network defense, threat detection and the organization’s ability to respond successfully. This makes network masking a very logical complement to next generation firewalls and other intrusion prevention systems. Network appliance vendors already acknowledge the security vulnerability associated with static MAC and IP addressing but existing solutions indirectly address the problem, reduce network performance, and increase the configuration management and auditing burden. Masking Networks’ approach provides a unique and more dynamic defense that maintains performance and compatibility without increasing the network management burden.