IntruVert Networks Intrusion Detection IntruShield

By
iApplianceWeb
(05/10/02, 12:05:41 PM EDT)

IntruVert Networks' next-generation intrusion detection systems, the IntruShield product line is the first intrusion detection system (IDS) to integrate patented signature, anomaly, and Denial of Service (DoS) analysis techniques in a single appliance.

The IntruShield system enables highly accurate network attack detection and prevention at up to 2 Gbps by integrating signature, anomaly and denial of service detection techniques to deliver next-generation intrusion detection and prevention capability.

The product line includes the IntruShield 4000 sensor, the IntruShield 2600 sensor and the IntruShield Security Management system, and represents the industry's first architecture to provide real-time detection and prevention of network intrusions against enterprise and government networks. The IntruShield model 4000 (I-4000) and modeel 2600 (I-2600) deliver performance and flexibility required for enterprise-wide deployments. When deployed in-line, the IntruShield sensor appliances are capable of handling deep-packet inspection at 10 times rate of packet processing capability of high-speed firewalls.

Common features of the I-4000 and I-2600 include:

- Flexible deployment options- Stateful analysis - Protocol analysis - Intrusion detection - Real-time intrusion prevention - Denial of Service detection - Proactive capability to stop - Interoperability with firewalls and enterprise management

The I-4000 is suited for deployment at the core of the enterprise or the perimeter of demanding networks. The I-4000's Gigabit Ethernet interfaces provide the performance and operational redundancy required to secure a high bandwidth, high-availability network infrastructure. It can deliver real-time detection at speeds up to 2 Gbps.

The I-2600 offers a scalable solution for mid to large networks. Multiple Fast Ethernet/Gigabit Ethernet interfaces on the I-2600 deliver protection for multiple network segments within the enterprise. In addition, the I-2600 enables deployment at the perimeter of distributed networks and includes support for multiple OC-3 connections. It can deliver an aggregate throughput up to 600 Mbps.

The devices are managed by IntruShield Security Management system is a centralized, easy-to-use, graphical web-based management system that provides flexible environment configuration, security policy management, forensic analysis, and response management while reducing overall administrative costs.

IntruShield Security Management features include:

- Web-based management - Alert Analysis - Automated Threat Updates - Remote reboot - Centralized security policy management - Administrative domains. - Response management - Interoperability with enterprise managers

The IntruShield Security Management (ISM) intended for large and distributed enterprise networks is available in two versions: IntruShield Global Manager and IntruShield Manager. The IntruShield Global can manage several hundred IntruShield sensors, while IntruShield Manager can support distributed deployments of up to three IntruShield appliances.