ITM Solution

Model Number

ARA-Traffic Sentinel

Enjoy superior Internet service Through our complete ITM solution Control Your Network!

ARA-Traffic Sentinel is for network monitoring and management and control in real-time. In addition, it provides detail traffic report, Sniffer, Web log and analysis and abnormal traffic detect and control.

The key of ARA-TS is providing functions to complement deficiencies of currently existing solutions. ARA-TS can completely block the detour of Web site access and the use of P2P application, and control Instant Messenger.

Know Your Network!

Nowadays, Web, P2P, Instant Messenger, and Web Mail became essential tools in Internet. Especially, Web, Instant Messenger, and Web Mail are utilizing useful tools of business communication. However, these tools might be used in non-business purpose by employee. Employee may access porn site, gambling site, and Internet game site during working hour. In some case, classified company information is leaked through P2P application unintentionally. There are many accidents happened by P2P application. If the network administrator is ignorant his network, he brings up unexpected loss to a company.

Problems of Current Web Filtering Solutions

There are several solutions for Web filtering. However, these solutions have defects and there are detours which make solutions useless.

DNS Block

This Web filtering method makes the DNS query not to response to its users. However, users can access the blocked site by inputting real IP address of Web site.

Router/Switch

This solution Web filter method is blocking Web site IP and Port.CP (contents provider) serves their Web service thorough other port. Even if IP is blocked, users can access Web site by using a Proxy Server.

L7 Switch

L7 Switch analyzes packets and blocks the Web sites. If L7 Switch should handle heavy traffic like backbone network, it's very risky. Because L7 Switch is down, whole network below the L7 Switch is going to be shut down. Also, it is impossible to analyze big traffic in real-time. Packet loss or delay is going to be happen

Problem of P2P Applications and Instant Messengers

There are lots of illegal contents shared by P2P users. Unintentionally, important files are also shared through P2P. Blocking installation of P2P application is almost impossible, so the accident like unintentional classified data leakage through P2P can be happned anytime. At the same time, your network might be suffered from traffic overflow caused by P2P users.

There are popular messengers such as MSN messenger and Yahoo Messenger. When company people transfer files through messenger, files transmission log may be important for the company. The reason is that some files shouldn't be out of company.

System Structure

Modular Type

ARA-TS is basically modular type structure; it consists of P2P protocol modules, Traffic analysis module, Packet Sniffing module, Web/Proxy Block and Messenger Control Module. ARA-TS can actively respond to new P2P protocols and new applications.

Main Functions 

Web Traffic Control

Most of enterprises are controlling their network with Firewall, and enterprises usually don't put restriction of use to 80 port.However, once network administrators look into their network, then they must be surprised by the fact that various types of traffic like P2P and messenger passes through 80 port.

• URL filtering
• Proxy Detour Block
• ACL Control by Time and User Group
• Web Mail Filtering
• Web Mail File Attachment Control
• Web Access and Filtered Logging and Search

P2P Traffic Control

There are various P2P applications. Web folder sometimes uses P2P type protocol and some of them use random port. ARA-TS performs L7 packet analysis. So, it can be applicable to new P2P protocol.

• P2P applications Block: eDonkey, Bit Torrent, Winny, Gnutella,...
• Web Folder File Transfer Block
• Inbound/Outbound Bandwidth Control
• Random Port Protocol Blocking
• Application Access and Filtered Logging and Search

Instant Messenger Control

Instant Messenger is one of the popular communication programs. However, messenger applications such as Yahoo and MSN sometimes need to be restricted in the company, because they can be used as non-work purpose. More seriously, important company information can be easily exposed to anybody who has intention to tap the conversation of employee with simple hacking tool.

• File Transfer Upload/Download Control
• File Transfer Logging
• Detour Connection Block (Proxy)

Log Analysis Report(Option)

ARA-TS allow the network administrator to log every Web/applications access of users. ARA-TS analyzes these logs and let the administrator help to set the management policy.

• Summary Report
• Web/Application Access Analysis (Hourly/Daily/Monthly)
• Web/Application Category Analysis Based On Web/Application DB
• Web Site Access Statistics
• Application Use Statistics
• Printable Log Analysis Report (Web/Excel Format)

Contents DB(Option)

ARA-TS allow custom DB to block unintentional data leakage. At first, generate contents DB of important data. Then, ARA-TS will block contents based on DB through Web, Instant Messenger, P2P, Web mail.Also, it is possible to add Web site address to block in custom DB.

Additional Functions

Traffic Report

It provides detailed traffic information. It would be great help for efficient network administration.

Abnormal Traffic Detection and Notice

It provides 5 alert algorithms to detect abnormal traffic. If you set your e-mail address, ARA-TS send you alert message.

Net flow Analysis

Sniffer - Law Data Capture

Tcpblock - Specific IP address and TCP Port Block

Pass-By Filtering: Mirrored Packet Monitoring

Deployment

ARA-TS uses Passive Traffic Monitoring Device such as Optical-tap to mirror whole traffic. Once ARA-TS gets the traffic from the device, it analyzes the traffic. If traffic needs to be controlled, ARA-TS send control signal to users. ARA-TS can guarantee high performance(No packet delay and loss) by using this method.

Easy to Manage Network

Win32 ARA-TS Management Program

ARA Networks provides Win32 Client application for ARA-TS management. It has user friendly interface, so easy to use. Network administrator can check network status in real-time. Once new P2P protocol or new version of application is appeared, you can update ARA-TS by clicking update button.