Intrusion Prevention Appliances

Product Assessment reports from Current Analysis provide a timely and in-depth evaluation on how leading products and services in a market measure up to their competition. Updated regularly by our industry-leading analysts, the reports deliver an objective and un-biased look at a product's strengths and weaknesses, ratings on how well the product meets specific customer buying criteria, and relevant product metrics. Compare selected products with side-by-side listings of product metrics and other factors, with a focus on actionable intelligence.

Subscription clients can access Product Assessment reports on our CurrentCOMPETE™ Intelligence Portal (See Client Access links below). They get real-time analysis of breaking industry news and events, as well as intelligence reports on companies, products, and markets. Click here to request more information.

Check Point IPS-1

Check Point continues to emphasize its new IPS software blade in development and marketing resources, although it still offers a dedicated appliance in the IPS-1, which uses a separate IPS engine and does not provide the same level of performance. (8/9/2011)

| Client Access |

Cisco IPS Series, Version 7.0

Cisco continued to emphasize both standalone and integrated IPS appliances in its network security lineup with the launch of the ASA 5585-X, which provides a new IPS module and software along with firewall and VPN. (8/4/2011)

| Client Access |

IBM Security Network Intrusion Prevention System

With the launch of the high-end GX 7800 IPS appliance, IBM added native 10 Gbps interfaces and 23 Gbps of throughput, allowing it to compete more effectively with the latest crop of high-performance appliances from market leaders. (8/8/2011)

| Client Access |

McAfee Network Security Platform

McAfee in its latest IPS software update took an arm’s length approach to virtual server security by integrating with pure play virtualization security provider Reflex Systems. (8/9/2011)

| Client Access |

Sourcefire 3D System

Sourcefire greatly expanded its addressable market on both ends of the performance continuum with its first IPS line for SMEs and high-performance appliances that raise the throughput bar for the industry. (8/4/2011)

| Client Access |

TippingPoint Intrusion Prevention Appliance

HP’s TippingPoint delivered greater scale to its method of securing VMware-based virtual servers with the launch of its S6100N IPS platform, which boosts inspection performance up to 16 Gbps when paired with the Core Controller. (8/29/2011)

| Client Access |

Top

• Current Analysis Perspective
• Product Strengths & Weaknesses
• Product Point and Counterpoint
• Product Buying Criteria
• Product Metrics

Intrusion Prevention Appliance Buying Criteria

• Detection and Response
• Methodology of detecting, preventing, alerting and auditing events; data analysis and correlating capabilities.
• Architecture
• Structure of the product, including network interface, integration and pre-configuration notations.
• Throughput (Performance)
• The speed with which the product analyzes data, and the efficiency of the network system.
• Vendor Support
• The support customers can expect to receive during and after system set-up, in regard to routine signature updates and emergency response.

Intrusion Prevention Appliance Product Metrics

• Performance And Sizing
• Intrusion Prevention
• Intrusion Detection
• In-line Test Mode
• Simultaneous IDS/IPS Mode
• Max. In-line IPS Throughput
• Max. IDS Monitoring Throughput
• Monitoring Ports (IDS Mode)
• In-line Pairs (IPS Mode)
• TCP Reset Ports
• Management Network Ports
• High Availability
• Fail-open
• Fail-closed
• Removable Hard Drive
• Interface Grouping
• Redundant Power Supply
• Detection
• Vulnerability Attack Detection
• Protocol Anomaly Detection
• DoS Attack Detection
• Stateful Signature Detection
• No. Network & Application Protocols
• User-defined Signatures
• Evasion Detection/Res. IDS Attack
• Fragmentation Attack Detection
• Asymmetric Routing Support
• VLAN Aware Detection
• Behavioral Traffic/Flow-based Det.
• Scan and Reconnaissance Detection
• Backdoor Detection
• Analysis
• Third-party Event Integration
• Built-in Real Time Event Corr.
• User-tunable Event Correlation
• Cross-sensor Event Analysis
• Full Packet Capture
• Event Filtering
• Additional Reference Data Provided
• Event Annotation/Auditing
• Event Description Updates
• Response Capabilities
• E-mail Notification
• SNMP Notification
• TCP Session Reset (Passive Mode)
• Session Record
• Console Response
• Export Flows
• Custom Response
• Firewall Interaction
• Router Interaction
• SNMP Interaction
• Management
• Secure Remote Management
• Multi-sensor Management
• Automatic Signature Update
• Auto Apply Sig. Updates to Policies
• Auto Enable Signature Blocking
• Pre-defined Protection Policies
• Clone/Copy Protection Policies
• On-Off Toggle for Blocking
• Data Storage
• Secure Data Storage
• External
• Built-in Data Storage
• Reporting
• Scalable Info Presentation
• Web-based Reporting
• SQL Export
• Automated and Schedulable Reporting
• Integration/Correlation
• Analysis of Firewall Alerts
• Analysis of HIDS Alerts
• Anal. Vulnerability Assmt. Alerts
• Analysis Third-party Net. IDS Alert
• Data Export Enterprise Mgmt Product
• Security Content
• Dedicated Sec. Research & Response
• Regular Security Updates
• 365x24x7 Outbreak Updates
• Regular Threat Report
• Services Available
• Full Time Managed Services
• SLAs with Managed Service
• Strategic Planning Services
• Deployment Services
• Incident Response Services
• Education Services
• Security Assessment Services
• Support Options
• Telephone and Web Support
• Product Notifications
• Software Upgrade Insurance
• Year Appliance Hardware Warranty
• Advanced Alerting Service
• Access Sec. Experts/Acct Managers
• Pricing
• Appliance MSRP
• First Year Maintenance/Support
• Renewal of Maintenance Support
• Base Cost per 100 Mbps Throughput
• Flex Licensing-No Forklift Upgrades
• Licensing Model