Intrusion Prevention System (IPS)

• Stateful Signature Detection: Signatures are applied only to relevant portions of the network traffic determined by the appropriate protocol context, minimizing false positives.
• Protocol Anomaly Detection: Protocol usage is verified against published RFCs to detect any violations or abuse, proactively protecting the network from intrusions and even undiscovered vulnerabilities.
• Traffic Anomaly Detection: Heuristic rules provide detection from unexpected traffic patterns that may suggest reconnaissance or attacks. This intrusion prevention system proactively prevents reconnaissance activities and blocks distributed denial of service (DDoS) attacks.
• Role-Based Administration: More than 100 different activities can be assigned as unique permissions for different administrators, streamlining business operations by logically separating and enforcing roles of various administrators.
• Intrusion Prevention System functions conform to business operations: Enable logical separation of devices, policies, reports, and other management activities to group devices based on business practices.

System Requirements

• Supported on the Multiservices PIC (MS-400 and MS-500) for the M120 and M320 Multiservice Edge Router.
• Runs on MS-DPC for the MX240, MX480, and MX960.

Operational Modes: Passive sniffer, inline bridge, inline Proxy-ARP, and inline router
Detection Mechanisms: 10, including Stateful Signatures and backdoor detection
Signature Updates: Daily and emergency