Intrusion Prevention Systems

ActiveScout Site Solution and Enterprise Solution (Intrusion Prevention group test)

Company: ForeScout Technologies
Pricing: $2,995

Accomplished hackers will always perform some sort of reconnaissance on a target network before mounting an attack - finding out details such as operating system types, application version, etc. The idea behind ActiveScout is that if the application can detect this activity it can later prevent it. Bogus host or ...

 

DP Inspector 100e (Group Test: Intrusion prevention)

Company: Barbedwire
Pricing: $1,995

Barbedwire's 1U DPI 100e is a firewall product that uses a 2GHz Celeron processor and 256MB RAM to provide enough power to run its IDS/IPS services.

 

McAfee Entercept (Special report Intrusion prevention)

Company: Network Associates
Pricing: Management Server $4995 (support extra)

Produced by McAfee, and the only Host-based IPS (HIPS) tested, Entercept monitors events at the operating system or application server level. As it does not deal with network-based exploits, it is very complementary to existing solutions that deal with attacks on that level, such as firewalls and network-based IDS or ...

 

CounterSnipe APD 1000 (Intrusion prevention group test)

Company: CounterSnipe Technology
Pricing: $7,495
At first blush, the CounterSnipe Active Protection Device (APD) 1000 appeared to be the easiest to install and get running.
 

STAR Engine (Intrusion Prevention group test)

Company: Barbedwire Technologies
Pricing: $9,995

Most of the products tested in the round up for this Group Test have been primarily aimed at the larger enterprise, as they tend to have the largest pockets and more need for protection. Barbedwire Technologies aims at the more modest-sized organization with its STAR Engine intrusion prevention product.

 

Internet Security Systems Proventia G200 (Special report Intrusion prevention)

Company: Internet Security Systems, Inc.
Pricing: Pricing for the Proventia G200 starts at $11,995 and includes the SiteProtector centralized management system

Proventia G Series is a new range of turnkey intrusion prevention appliances from ISS. They are designed to proactively block malicious attacks from entering the network, including denial-of-service (DoS), intrusions and malicious code, backdoors and hybrid threats like MS Blaster or SQL Slammer. Proventia G Series blocks attacks in real-time, ...

 

V-Secure V-100 (Group Test: Intrusion prevention)

Company: V-Secure Technologies
Pricing: $25,000

This might not be the most attractive appliance, with a bright green front, but its flexible architecture is likely to win it support. It is designed to sit internally or between the firewall and router and can support up to 100Mbps of network traffic. It comes with two Fast Ethernet ...

 

Primary Response (Intrusion Prevention group test)

Company: Sana Security
Pricing: $6,500 (management server); $1,750 (application server agent)

Primary Response is the first product to come from Sana Security (formerly Company 51). The software is based on research that began in the mid-nineties and uses techniques more akin to the human immune system than conventional network security.

 

McAfee IntruShield 4000 (Special report Intrusion prevention)

Company: Network Associates, Inc.
Pricing: McAfee IntruShield 4000 Appliance - $99,995 McAfee IntruShield Starter Manager Software - $0 PC for McAfee IntruShield Starter Manager - $3,000 (approximate cost) Optional redundant hot-swappable power-supply for IntruShield 4000 - $2,495

Based on standard and custom-designed processors, the NAI IntruShield system is a high-performance appliance that offers real-time network intrusion detection and prevention against known and unknown, denial-of-service (DoS) attacks for enterprise networks.

 

XSGuard C-Series (Group Test: Intrusion prevention)

Company: XSGuard
Pricing: $9,900

XSGuard's C-Series is the easiest product to install. Just plug the internal side of your network into the marked Fast Ethernet port and the external side in the other marked port. Turn the box on and it connects to the XSGuard servers and starts filtering traffic at 100Mbps.