IDS/IPS Solutions

An intrusion detection system (IDS) generally detects unwanted manipulations to computer systems, mainly through the Internet. The manipulations may take the form of attacks by crackers. An intrusion detection system is used to detect many types of malicious network traffic and computer usage that can't be detected by a conventional firewall. This includes network attacks against vulnerable services, data driven attacks on applications, host based attacks such as privilege escalation, unauthorized logins and access to sensitive files, and malware (viruses, trojan horses, and worms). An IDS is composed of several components: Sensors which generate security events, a Console to monitor events and alerts and control the sensors, and a central Engine that records events logged by the sensors in a database and uses a system of rules to generate alerts from security events received.

IDS/IPS Solutions >

Click Here for Pricing - AirDefense Enterprise 7.2™ is the most powerful Wireless Intrusion Prevention System (IPS) available. Having pioneered the field of wireless IPS, AirDefense continues to lead in innovation with 24 patents pending or granted. The AirDefense Enterprise solution provides complete protection against wireless threats, policy compliance monitoring, robust performance monitoring and troubleshooting, and location tracking in an appliance that can scale to meet the largest global organizations’ needs.

Powered by the industry’s most advanced IDS engines, policy manager and correlation engines, AirDefense accurately detects and protects the network against all wireless threats and unauthorized devices. As a key layer of security, AirDefense Enterprise complements wireless VPNs, encryption & authentication.

Click Here for Pricing - An industry first, AirDefense Personal™ enforces corporate polices for all types of wireless networks, including Wi-Fi, EVDO, 3G, GPRS and many more. AirDefense Personal protects the mobile workforce from the wireless-specific risks that could expose private data and confidential transactions. Many cities across the world are now in the process of creating a wireless access blanket in city areas; every desktop could potentially connect to this network if they have a wireless adapter. AirDefense Personal is a software agent that runs on Windows PCs and monitors for malicious or accidental wireless activity, as well as wireless device misconfigurations that may cause security exposures or policy violations. This solution complements personal firewalls and host-based IDS systems that don’t protect the client against wireless attacks.

AirDefense Personal offers protection from a broad and growing set of new risks that directly target vulnerable wireless users, unobtrusively notifies the user when risky activity occurs or mitigate the risk entirely by proactively disabling the wireless connection. The data collected from AirDefense Personal can also be used by the network administrator to gain knowledge of the network usage patterns of mobile employees. Historical and current threat assessment can then be used for setting custom wireless policies that can automatically mitigate the risks of wireless vulnerabilities of mobile stations at the edge of the network. AirDefense Personal can also be deployed in enterprises to stop ad-hoc usage, bridging and probing stations. This powerful tool allows end users to solve complex policy enforcement situations. AirDefense Personal does this through integrated rules and policies within the product. By empowering administrators to create profiles that fit corporate business needs the mobile user is protected from common issues that using Wi-Fi technology.

Click Here for Pricing - SpectraGuard Enterprise - For enterprises with wireless LAN networks, as well as those without, Wi-Fi brings a new set of security threats that cannot be protected against by your current firewall and VPN security systems. Insecure deployments of wireless Access Points (APs) called Rogue APs, often done without malice by your own employees, can open up your network to potential hackers exposing confidential information about your business, customers, products and services. Client mis-associations may lead to additional vulnerabilities. The SpectraGuard Enterprise Wireless IPS solves these problems by delivering similar protection as a wired firewall, but focused on your corporate airwaves..

Click Here for Pricing - SpectraGuard MNC - Secure and manage networks with millions of wireless devices SpectraGuard MNC provides the manager of manager functionality to scale WIPS deployments globally. SpectraGuard MNC will help you manage a network of millions of wireless devices across a country or around the globe, giving you visibility into where you have performance issues, where you may have threats, where you may be under attack, and tracking the location of wireless devices around the world. Protect your global enterprise against wireless threats SpectraGuard MNC manages multiple SpectraGuard Enterprise appliances.

Click Here for Pricing - SpectraGuard Sentry - Simple to install and low cost, Wi-Fi networks both improve productivity and pose a danger to your business' security. Insecure deployments of Wi-Fi Access Points (APs) called Rogue APs, often done without malice by your own employees can open up your network to potential hackers confidential information about your business, customers, products and services. Client mis-associations may lead to additional vulnerabilities. Small businesses have just as much at stake as large enterprises when it comes to protecting their assets. The new SpectraGuard Sentry Wireless IPS solves this problem by balancing the need for enterprise-class security with an entry-level price point.

Click Here for Pricing - VPN-1 UTM consolidates proven security functions including firewall, intrusion prevention, antivirus, antispyware, Web application firewall, and both IPSec and SSL VPN, within a single integrated solution.

It includes Check Point’s SmartCenter management for completely centralized control, and is supported by SmartDefense Services, which provide real-time updates and configuration advisories for defenses and security policies.

Click Here for Pricing - Check Point IPS-1 is a dedicated intrusion prevention system (IPS) that delivers mission-critical protection with unmatched management and granular forensic analysis capabilities and flexible deployment. The IPS-1 Hybrid Detection Engine delivers active detection and prevention at the network perimeter while the IPS-1 Dynamic Shielding Architecture drives preemptive functions to protect the network interior. Additional prevention is enabled through Confidence Indexing, which delivers unmatched flexibility in deploying prevention across the network. All these IPS-1 functions are controlled by powerful centralized management that readily supports both small- and large-scale deployments.

Click Here for Pricing - X40 Hardware Chasis - Crossbeam Systems' X-Series is a high-end performance, chassis-based network security solution, enabling you to consolidate best-of-breed security applications onto a purpose-built, highly available infrastructure. Thus, you eliminate the cost of multiple traditional point security products, while enabling an efficient, intelligent service delivery solution – without sacrificing high availability, extreme performance, and resiliency.

Click Here for Pricing - X45 Hardware Chasis - Crossbeam Systems' X-Series is a high-end performance, chassis-based network security solution, enabling you to consolidate best-of-breed security applications onto a purpose-built, highly available infrastructure. Thus, you eliminate the cost of multiple traditional point security products, while enabling an efficient, intelligent service delivery solution – without sacrificing high availability, extreme performance, and resiliency.

Click Here for Pricing - X80 Hardware Chasis - Crossbeam Systems' X-Series is a high-end performance, chassis-based network security solution, enabling you to consolidate best-of-breed security applications onto a purpose-built, highly available infrastructure. Thus, you eliminate the cost of multiple traditional point security products, while enabling an efficient, intelligent service delivery solution – without sacrificing high availability, extreme performance, and resiliency.

Click Here for Pricing - C2 Security Switch - Crossbeam Systems' C-Series security switches, built from the same architectural foundation as the market-leading X-Series, offer comprehensive security applications, high availability, and performance that is perfect for small- to medium-sized businesses, enterprises with extended security deployments to branch offices or remote sites, or managed service providers looking to provide security service delivery to their subscriber base. The C-Series provides firewall, VPN, IPS/IDS, anti-virus, URL filtering, and content scanning as standalone features or combined for unified threat mitigation – at unrivalled performance levels. In addition to traditional data traffic, the C-Series security switches are also particularly well suited for Voice over IP (VoIP) traffic, allowing businesses to take advantage of all the benefits VoIP affords.

Click Here for Pricing - C6 Security Switch - Crossbeam Systems' C-Series security switches, built from the same architectural foundation as the market-leading X-Series, offer comprehensive security applications, high availability, and performance that is perfect for small- to medium-sized businesses, enterprises with extended security deployments to branch offices or remote sites, or managed service providers looking to provide security service delivery to their subscriber base. The C-Series provides firewall, VPN, IPS/IDS, anti-virus, URL filtering, and content scanning as standalone features or combined for unified threat mitigation – at unrivalled performance levels. In addition to traditional data traffic, the C-Series security switches are also particularly well suited for Voice over IP (VoIP) traffic, allowing businesses to take advantage of all the benefits VoIP affords.

Click Here for Pricing - C12 Security Switch - Crossbeam Systems' C-Series security switches, built from the same architectural foundation as the market-leading X-Series, offer comprehensive security applications, high availability, and performance that is perfect for small- to medium-sized businesses, enterprises with extended security deployments to branch offices or remote sites, or managed service providers looking to provide security service delivery to their subscriber base. The C-Series provides firewall, VPN, IPS/IDS, anti-virus, URL filtering, and content scanning as standalone features or combined for unified threat mitigation – at unrivalled performance levels. In addition to traditional data traffic, the C-Series security switches are also particularly well suited for Voice over IP (VoIP) traffic, allowing businesses to take advantage of all the benefits VoIP affords.

Click Here for Pricing - C25 Security Switch - Crossbeam Systems' C-Series security switches, built from the same architectural foundation as the market-leading X-Series, offer comprehensive security applications, high availability, and performance that is perfect for small- to medium-sized businesses, enterprises with extended security deployments to branch offices or remote sites, or managed service providers looking to provide security service delivery to their subscriber base. The C-Series provides firewall, VPN, IPS/IDS, anti-virus, URL filtering, and content scanning as standalone features or combined for unified threat mitigation – at unrivalled performance levels. In addition to traditional data traffic, the C-Series security switches are also particularly well suited for Voice over IP (VoIP) traffic, allowing businesses to take advantage of all the benefits VoIP affords.

Click Here for Pricing - A Wireless Intrusion Detection System (WIDS) module is available for the Fortress ES520. This module allows one of the radios in a Fortress Es520 to function as a WIDS sensor and report to a Network Chemistry's RFprotect Server.

Click Here for Pricing - IBM Proventia Network Intrusion Prevention System (IPS) GX6116 - Intrusion prevention systems (IPS) can help enterprises meet compliance requirements and protect valuable business data, but network administrators cannot tolerate the negative impact many traditional security appliances have on the network. The solution enterprises require merges network performance and availability with advanced threat protection. The Proventia GX6116 offers the best of both worlds -- network performance and ahead-of-the-threat protection. Engineered with today's three network pain points in mind -- Performance, Availability and Reliability -- the Proventia GX6116 Network IPS is designed to secure the network, maximize uptime and optimize throughput.

Click Here for Pricing - The IBM Proventia Network Intrusion Prevention System (IPS) delivers preemptive protection for enterprise networks. Proventia Network IPS stops malicious Internet attacks before they impact your organization, the only effective way to preserve network availability, reduce the burden on your IT resources and prevent security breaches.

Click Here for Pricing - The IBM Proventia Network Intrusion Prevention System (IPS) for Crossbeam delivers preemptive protection for carrier-class networks. With service offerings dependent on network availability and performance, carriers can rely on Proventia Network IPS for Crossbeam to protect the network infrastructure against Internet threats. It offers: "Ahead of the threat" protection powered by ISS X-Force vulnerability-based security research; World-leading IPS Technology enables Proventia Network IPS for Crossbeam to block Internet threats before they impact performance and availability; Expanded Revenue Opportunities, enabling carriers to offer Managed Security Services to their own customers using the Proventia and Crossbeam delivery platform. Proventia Network IPS for Crossbeam harnesses the flexibility and power of Crossbeam Systems' carrier-class X-Series security switch. Proventia Network IPS for Crossbeam runs on Crossbeam's AP8400 application processor blade cards.

Click Here for Pricing - IBM Proventia Network Multi-Function Security (MFS) appliances are powerful yet cost-effective unified threat management (UTM) devices. They stop all types of Internet threats before they penetrate your network and impact your business. These all-in-one UTM appliances ensure maximum network uptime, improving workforce productivity by blocking viruses, worms, hackers, spam and unwanted Web content. Proventia Network MFS combines industrial strength intrusion prevention with firewall, VPN, behavioral and signature antivirus, Web filtering and antispam technologies in a single, easy-to-manage UTM appliance.

Click Here for Pricing - IBM Proventia Server Intrusion Prevention System (IPS) offers multi-layered protection for Windows and Linux servers, keeping your data and applications reliable, available and confidential. Proventia Server IPS dramatically reduces down-time and network security costs while protecting enterprise server environments from attack. Proventia Server IPS is a scalable server protection solution that is easy to install, configure and manage.

Click Here for Pricing - IBM RealSecure Guard 10/100, an inline network intrusion prevention system (IPS), actively protects network segments, including mission critical systems by automatically blocking malicious attacks. Unlike most inline intrusion detection and response systems, RealSecure Guard 10/100 reduces the amount of administrator intervention by immediately responding to attacks as they occur. RealSecure Guard 10/100 ensures accurate detection and prevention capabilities without decelerating network links or otherwise slowing down traffic. RealSecure Guard 10/100 is managed using Proventia Management SiteProtector, a centralized command environment. It is backed by X-Force security intelligence for up-to-date protection against the latest threats.

Click Here for Pricing - RealSecure Network 10/100 software provides network intrusion detection and response capabilities that monitor 10/100Mbps network segments within a centralized operational and management framework. Supporting commonly deployed operating system environments, RealSecure Network 10/100's market-leading technology and superior security intelligence deliver exceptional network security performance and unprecedented accuracy in detecting malicious threats. RealSecure Network 10/100 installations are centrally managed through Proventia Management SiteProtector. Backed by X-Force security intelligence, continuous X-Press Update product enhancements ensure up-to-date protection so that customers can effectively monitor and protect their networks against known and unknown attacks.

Click Here for Pricing - IBM RealSecure Network Gigabit software provides network intrusion detection and response capabilities that monitor Gigabit network segments within a centralized operational and management framework. Supporting commonly deployed operating system environments, RealSecure Network Gigabit's market-leading network security technology and superior security intelligence deliver exceptional performance and unprecedented accuracy in detecting malicious threats. RealSecure Network Gigabit installations are centrally administered and maintained through the IBM Proventia Management SiteProtector system with tight integration with ISS' other enterprise protection products. Backed by X-Force security intelligence, continuous X-Press Update product enhancements ensure up-to-date protection so that you can effectively monitor and protect your networks against from attacks.

Click Here for Pricing - IBM RealSecure Server Sensor dramatically reduces network security costs while protecting enterprise server environments and reducing down-time. RealSecure Server Sensor provides automated, real-time intrusion protection and detection by analyzing events, host logs, and inbound and outbound network activity on critical enterprise servers to block malicious activity from damaging critical assets. RealSecure Server Sensor applies built-in signatures and sophisticated protocol analysis with behavioral pattern sets and automated event correlation to prevent known and unknown attacks.

Click Here for Pricing - IBM Proventia Network Anomaly Detection System (ADS) is a network behavior analysis system that enhances your network intelligence and security by auditing network flow data from existing infrastructure devices. This solution delivers a clear view of your network's behavior while automatically detecting active security threats, risky user behavior, performance issues and noncompliant activities, such as policy violations and unapproved network changes. Proventia Network ADS complements and expands upon protection from your existing intrusion prevention system (IPS) by continually examining the behavior of users, networks and applications across the entire enterprise without causing a bottleneck or requiring any network redesign. Proventia Network ADS mitigates threats and complements firewall and IPS technologies.

Click Here for Pricing - Lancope's StealthWatch Xe for NetFlow collector appliance leverages NetFlow traffic information from Cisco, Juniper and other leading network infrastructure vendors to provide cost-effective, behavior-based network protection for distributed enterprise environments. The StealthWatch Xe appliance aggregates high-speed network behavior data from multiple networks or network segments to extend StealthWatch protection across geographically dispersed enterprise networks. As a result, StealthWatch Xe provides a cost-effective solution for organizations seeking to protect internal resources while safely maintaining trusted relationships with customers, partners and other third-party networks.

Click Here for Pricing - Lancope's StealthWatch Xe for sFlow collector appliance leverages sFlow traffic samples from Foundry, Extreme, HP ProCurve, and other leading network infrastructure vendors to provide cost-effective, behavior-based network protection for distributed enterprise environments. StealthWatch Xe for sFlow aggregates high-speed network behavior data from multiple networks or network segments to extend StealthWatch protection across geographically dispersed enterprise networks. As a result, it makes StealthWatch Xe for sFlow a cost-effective solution for organizations seeking to protect internal resources while safely maintaining trusted relationships with customers, partners and other third-party networks.

Click Here for Pricing - The StealthWatch NC appliance defeats threats from external and internal sources, regardless of known or unknown targeted vulnerability. With native flow capture to provide more detailed coverage and greater packet inspection for sensitive areas of the network, StealthWatch NC prioritizes risks and helps ensure compliance with security and network usage policies. It also captures and summarizes transaction records for all network communications to enable powerful forensic analysis and expedite incident investigation and remediation efforts.

Click Here for Pricing - Nokia IP290 is a UTM appliance designed for remote connectivity and perimeter security for small office and extended enterprise environments. The purpose-built Nokia IP290 platform, with Nokia IPSO secure OS and Check Point VPN-1 UTM, combines firewall, VPN, intrusion protection, anti-virus and web-filtering technologies, for a complete security solution. This powerful security appliance is offered in a small form factor with options for side-by-side redundancy in a single 1RU space, providing a low-cost/high availability solution ideal for IP Clustering Virtual Router Redundancy Protocol (VRRP) technologies. With an intuitive, out-of-box experience, the solution provides centrally-managed, secure connectivity for remote sites and is well-suited for customers who demand complete network reliability and integrated security with exceptional price performance.

Click Here for Pricing - Nokia IP390 security platform, running Check Point VPN-1, is highly-versatile and easy to install and manage. With an intuitive out-of-box experience, Nokia IP390 provides the sophisticated management and security essential for large businesses requiring high performance perimeter security and internal network segmentation. Nokia IP390 delivers over 3 Gbps of Ethernet for firewall traffic and a total throughput of 600 Mbps encrypted traffic through the included 4-port 1000BaseT Ethernet card in a 1RU security platform. Nokia IP390 offers the option of either disk, flash or hybrid-based storage configurations. The hybrid configuration uses flash storage for Nokia IPSO Check Point enforcement module, and local disk for management and logging. With the option for 8 ports of Gigabit Ethernet, Nokia IP390 offers equivalent port density, firewall performance, superior security and manageability to competitive systems costing more than twice as much.

Click Here for Pricing - Nokia IP690 is a highly-versatile security appliance, purpose-built and optimized for Check Point VPN-1 firewall and UTM applications. It delivers up to 7 Gbps of firewall throughput performance and has capacity for 16 Gigabit Ethernet ports. Nokia IP690 delivers the unique combination of high port density and performance in a single rack unit configuration. With its new hardware design, Nokia IP690 readies the enterprise for processor-intensive security. It also enables expandability and performance improvement through add-on interface cards and software upgrades to support future applications without forklift upgrades or sacrificing performance.

Click Here for Pricing - SecureFlow enables transparent, selective integration of content inspection, anti-virus, VPN, IDS and firewall best-of-breed security tools into a unified switched architecture to eliminate the security/performance tradeoff and improve ROI. SecureFlow ensures high security tool availability, eliminates security bottlenecks and boosts security processing speeds while enabling cost effective security scaling letting you extract more value from your combined defense architecture. Affording centralized security resource management, SecureFlow enables the seamless addition of new security tools, for complete security vendor freedom, with no performance or integration overhead making it easy to change/add new tools to meet emerging security needs. SecureFlow’s powerful policy-based flow control coordinates security operations across multiple devices letting you custom fit security operations while greatly simplifying management.

Click Here for Pricing - Reflex IPS25 - Reflex IPS is your network security enforcer and provides automated defenses against a wide range of attack vectors – intrusions, malicious content, DoS, anomalies and more. Operating inline, Reflex IPS applies deep packet inspection with signature, anomaly, and rate-based algorithms to inspect and control network traffic flows.

Click Here for Pricing - Reflex IPS50 - Reflex IPS is your network security enforcer and provides automated defenses against a wide range of attack vectors – intrusions, malicious content, DoS, anomalies and more. Operating inline, Reflex IPS applies deep packet inspection with signature, anomaly, and rate-based algorithms to inspect and control network traffic flows.

Click Here for Pricing - Reflex IPS75 - Reflex IPS is your network security enforcer and provides automated defenses against a wide range of attack vectors – intrusions, malicious content, DoS, anomalies and more. Operating inline, Reflex IPS applies deep packet inspection with signature, anomaly, and rate-based algorithms to inspect and control network traffic flows.

Click Here for Pricing - Reflex IPS100 - Reflex IPS is your network security enforcer and provides automated defenses against a wide range of attack vectors – intrusions, malicious content, DoS, anomalies and more. Operating inline, Reflex IPS applies deep packet inspection with signature, anomaly, and rate-based algorithms to inspect and control network traffic flows.

Click Here for Pricing - Reflex IPS175 - Reflex IPS is your network security enforcer and provides automated defenses against a wide range of attack vectors – intrusions, malicious content, DoS, anomalies and more. Operating inline, Reflex IPS applies deep packet inspection with signature, anomaly, and rate-based algorithms to inspect and control network traffic flows.

Click Here for Pricing - Reflex IPS1500 Series - Reflex IPS is your network security enforcer and provides automated defenses against a wide range of attack vectors – intrusions, malicious content, DoS, anomalies and more. Operating inline, Reflex IPS applies deep packet inspection with signature, anomaly, and rate-based algorithms to inspect and control network traffic flows.

Click Here for Pricing - Reflex MG5 - The heavy-hitting Reflex IPS MG5 and Reflex IPS MG10 systems deliver high performance, high availability intrusion prevention to the network core at up to 10 Gbps. The standards-based Reflex IPS MG™ is an ideal solution for enterprise, carrier, MSSP and hosted applications that require high security, high bandwidth, high reliability, granular control, NEBS compliance and other critical features. The Reflex MG overcomes the shortcoming of disparate "pizza box" and/or other low-availability, low-performance security server systems. It delivers a network-wide solution with unsurpassed security, performance, reliability and ease of use.

Click Here for Pricing - Reflex MG10 - The heavy-hitting Reflex IPS MG5 and Reflex IPS MG10 systems deliver high performance, high availability intrusion prevention to the network core at up to 10 Gbps. The standards-based Reflex IPS MG™ is an ideal solution for enterprise, carrier, MSSP and hosted applications that require high security, high bandwidth, high reliability, granular control, NEBS compliance and other critical features. The Reflex MG overcomes the shortcoming of disparate "pizza box" and/or other low-availability, low-performance security server systems. It delivers a network-wide solution with unsurpassed security, performance, reliability and ease of use.

Click Here for Pricing - Sidewinder G2 - Consolidating all major security functions under a single management interface, Sidewinder Network Gateway Security appliances deliver industry-leading, application-layer performance and best-in- class security. With over a decade of successful deployments in the most demanding, high-security environments, we have gained a reputation for building the world’s strongest self-defending firewall/VPN. Built with a comprehensive combination of high-speed application proxies, TrustedSource reputation-based global intelligence, and a complete arsenal of signature-based security services, our Unified Threat Management (UTM) firewalls defend networks and Internet-facing applications from all types of malicious threats, both known and unknown. Enterprises use our Network Gateway appliances to secure network access, protect Internet-facing applications, kill hidden attacks in packet streams, block viruses, spyware and spam, secure employee use of the Internet, decryption of SSL traffic, and create a forensic-quality audit trail for regulatory compliance and reporting.

Click Here for Pricing - Strata Guard employs six distinct attack-detection technologies for comprehensive network protection. With signature-based and behavior-based attack detection, deep packet inspection, and protocol anomaly analysis, Strata Guard terminates network-, application-, and service-level attacks including worms, Trojans, spyware, port scans, DoS and DDoS attacks, server exploit attempts, and viruses before they infiltrate the network and cause real damage. Beyond blocking malicious attacks, Strata Guard enforces your network usage polices and can block peer-to-peer file sharing, instant messaging, chat, prohibited browsing activity, and worm propagation. It detects anomalous activity such as spoofed attack source addresses, TCP state verification, and rogue services running on the network.

Click Here for Pricing - StoneGate IPS-6000 is designed for accurate intrusion prevention in internal networks at main site, before critical servers. The appliance can be used as inline IPS Sensor or combined Sensor-Analyzer. It is used in conjunction with StoneGate Management Center. StoneGate IPS-6000 can protect up to four inline segments. It has a bypass network card for each inline segment and two ports for StoneGate management traffic. This 3U appliance has triple-redundant power supply units.

Click Here for Pricing - StoneGate IPS-2000 Intrusion Prevention System is a proactive defense system designed to detect malicious packets within regular network traffic and prevent intrusions by blocking the offending traffic automatically before any damage occurs. With the capacity of 600 Mbit/s StoneGate IPS-2000 is designed for branch offices, DMZ’s, extranet or internal network segments. Appliance features both sensor and analyzer functionalities, giving flexible protection for environments requiring ultimate ease of usage. For most capacity demanding environments StoneGate IPS-2000 can be configured to feature separate sensor or analyzer mode, combining several appliances into one virtual security engine. All StoneGate IPS-2000 sensor appliances can protect up to two inline segments. They have a bypass interface pair for each inline segment and four standard Ethernet interfaces. Standard interfaces can be used as capture interfaces for intrusion detection and one of them is needed for StoneGate management traffic.

Click Here for Pricing - StoneGate IPS-400 Intrusion Prevention System is a proactive defense system designed to detect malicious packets within regular network traffic and prevent intrusions by blocking harmful traffic automatically before any damage occurs. With 100 Mbit/s capacity, StoneGate IPS-400 is designed for small branch offices. Appliance features both sensor and analyzer functionalities, giving flexible protection for environments requiring ultimate ease of usage. StoneGate IPS-400 appliance has one bypass interface pair for segmentation and two standard Ethernet interfaces to be used as capture interface for intrusion detection. One Ethernet Interface is needed for StoneGate Management traffic.

Click Here for Pricing - StoneGate SGI-2000S IPS Sensor is designed for accurate intrusion detection in internal networks and gigabit backbones. The appliance is used in conjunction with StoneGate Analyzer and StoneGate Management Center. SGI-2000S IPS Sensor has three fail-open pairs and two management ports. This 3U appliance is based off our acclaimed SG-4000, with its triple-redundant power supply units and three hard drives protecting your data. It uses multiple detection methods, sensor rule bases, and customizable protocol validation.

Click Here for Pricing - The SGI-200S is the IPS Sensor appliance for up to 400 Mbps of traffic. It is used in conjunction with StoneGate Analyzer and StoneGate Management Center. The SGI-200S IPS Sensor has two fail-open pairs and two management ports. It uses multiple detection methods, sensor rule bases, and customizable protocol validation.

Click Here for Pricing - SGI-200N is the IPS Sensor appliance for customers who prefer to use an external hardware bypass solution, or if they wish to use it as a traditional IDS product. The appliance is used in conjunction with StoneGate Analyzer and StoneGate Management Center. It uses multiple detection methods, sensor rule bases, and customizable protocol validation.

Click Here for Pricing - SGI-200C combines the IPS Sensor with IPS Analyzer in the same appliance. It is designed for customers who need only a single sensor on a location with up to 400 Mbps of traffic. SGI-200C can be centrally managed with StoneGate Management Center. SGI-200C IPS Sensor and Analyzer has two fail-open pairs and two management ports. The appliance uses multiple detection methods, sensor rule bases, customizable protocol validation and configurable analyzer system policy to achieve accurate detection and intelligent event correlation.

Click Here for Pricing - The SGI-200ANZ IPS Analyzer correlates security events from multiple sensors using a configurable policy to achieve accurate detection and intelligent event correlation. StoneGate IPS Analyzer is targeted for sites that want to have a central analyzer for several sensors. It works in conjunction with StoneGate Management Center and one or more StoneGate Sensors.

Click Here for Pricing - StoneBeat SecurityCluster - StoneBeat SecurityCluster takes your server-based Anti-virus/content security/IDS solution to the next level.