IBM GX4004 Internet Security Systems Proventia Network

Description

IBM GX4004 Internet Security Systems Proventia Network
Proventia intrusion prevention features include proven detection and prevention technologies, along with the latest security updates. These appliances understand the logical flow and state of traffic, resulting in unsurpassed protection against network threats, including trojans, backdoors and worms. Proventia Network IPS offers the following features to protect your network against threats: ● Dynamic blocking Proventia Network IPS uses vulnerability-based attack identification to enable an immediate and reliable blocking response to unwanted traffic while allowing legitimate traffic to pass unhindered. It employs a deep traffic inspection process that uses detection-based blocking to stop both known attacks and previously unknown attacks. ● Firewall rules You can create firewall rules that enable the appliance to block incoming packets from particular IP addresses, port numbers, protocols, or VLANs. These rules block many attacks before they affect your network. Protected Network attack traffic permitted traffic 0001110001 0111000111 0001110001 101010100 001110001 1110001110 001110001 1010101000 payload header payload header HTTP HTTP
Proventia inspects HTTP packet Protects against attack Firewall inspects header Allows web traffic to pass Intrusion Prevention Proventia Network IPS G and GX Appliance User Guide 23 ● Automatic security content updates based on the latest security research You can automatically download and activate updated security content. The security updates you receive are a result of IBM ISS X-Force Research and Development Team’s ongoing commitment to provide the most up-to-date protection against known and unknown threats. ● Quarantine and block responses Inline appliances use the quarantine response to block traffic for a specified amount of time after an initial attack, and they use the block response to block and reset a connection in which an event occurs or to drop the packet that triggered an event. ● Virtual Patch™ protection Proventia’s Virtual Patch capability provides a valuable time buffer, eliminating the need for you to immediately patch all vulnerable systems. You can wait until you are ready to manually update appliances or until scheduled updates occur, rather than having to patch and restart systems. ● SNMP support Using SNMP-based traps, you can monitor key system problem indicators or respond to security or other appliance events using SNMP responses.