Allumetis

Allumetis Gate is a new on-premises security solution designed to help organizations detect and stop authentication attacks against Windows servers and the applications they host.

Allumetis focuses on a common problem for organizations running Exchange, IIS and other Windows-based services: repeated authentication failures caused by password guessing, brute-force attacks, password spraying and other automated attempts to gain access.

The product takes a different approach from security solutions that depend on a single application or protocol. Allumetis Gate is being designed as a centralized security engine that can receive authentication and security information from multiple sources, evaluate activity and apply an appropriate response.

Current and developing detection sources include Exchange and protocol logs, Windows Security Event Logs, IIS and web application activity, and other authentication-related log sources.

Gate can use information such as the source IP address, authentication activity, geographic location and historical activity to make security decisions. The platform is also being designed to incorporate additional intelligence sources, including publicly available IP block lists and, where appropriate, external IP reputation services.

When an attack is identified, Gate can automatically enforce a security decision. Current enforcement capabilities include Windows Firewall integration, allowing malicious source IP addresses to be blocked at the Windows host. Additional enforcement mechanisms are being developed for different network environments, including IIS integration.

This multi-layer approach is particularly useful because modern Windows deployments can have very different network architectures. Some servers receive connections directly from the Internet, while others sit behind reverse proxies, load balancers or other network appliances. Different environments can therefore require different methods of identifying the original client and enforcing a block.

Allumetis Gate is being developed incrementally, with additional detection sources, intelligence integrations and enforcement capabilities being added over time.

The goal is to provide organizations with a single security engine capable of collecting information from multiple sources, correlating activity, evaluating threats and enforcing security decisions at the point where they can be most effective.

Allumetis Gate is initially focused on helping organizations protect Windows-based infrastructure from authentication attacks, with particular attention to Exchange and other services that can be targeted by automated login attempts.

The product is developed by Allumetis, with a focus on practical, on-premises security solutions for organizations that need greater visibility and control over authentication activity within their own infrastructure.