入侵防禦系統 (IPS)

• Stateful Signature Detection: Signatures are applied only to relevant portions of the network traffic determined by the appropriate protocol context, minimizing false positives.
• Protocol Anomaly Detection: Protocol usage is verified against published RFCs to detect any violations or abuse, proactively protecting the network from even undiscovered vulnerabilities.
• Traffic Anomaly Detection: Heuristic rules detect unexpected traffic patterns that may suggest reconnaissance or attacks. This proactively prevents reconnaissance activities and blocks distributed denial of service (DDoS) attacks.
• Role-Based Administration: More than 100 different activities can be assigned as unique permissions for different administrators, streamlining business operations by logically separating and enforcing roles of various administrators.
• IPS functions conform to business operations: Enable logical separation of devices, policies, reports, and other management activities to group devices based on business practices.

System Requirements

• Supported on the Multiservice PIC (MS-PIC 100, MS-PIC 400 and MS-PIC 500) for the M120 and M320 Multiservice Edge Router.
• Runs on MS-DPC for the MX240, MX480, and MX960.

Operational Modes: Passive sniffer, inline bridge, inline Proxy-ARP, and inline routerDetection Mechanisms: 10, including Stateful Signatures and backdoor detectionSignature Updates
Daily and emergency