Security

The Network Box intrusion detection and prevention (IDP) module integrated with the firewall scans network traffic at the application level, and seamlessly blocks malicious behaviour with zero latency.

A comprehensive database of IDP signatures precisely matches and actively blocks known exploits. Protection against newly emerging threats is provided by a database of vulnerability-class based signatures and heuristic (expert system) anomaly-based behavioural analysis.

The Network Box IDP system is updated in real-time, using high speed PUSH technology from the global network of Network Box security operation centres.

Features

• Intrusion detection engine: zero latency, hybrid, multi-level, tightly integrated with firewall.
• Action: active (blocks network traffic) and / or passive (logs intrusion attempts).
• Reporting: real-time (on demand), and periodic (summary) by SMTP e-mail.
• Types of intrusion detected: ICMP/IP, Denial of Service (DoS), portscans, protocol level, application level.
• Just-In-time and heuristic engines: to block uncharacterised attacks before they have a signature.
• Signatures: depends on configuration, but normally in excess of 2,500 (IDS)/350 (IDP).