Fortinet in IPS (04 Ocak 2008)

Fortinet offers a scalable and easy to deploy line of FortiGate IPS security functions that can be installed seamlessly at the network edge or as an IPS solution deployed at the network core to protect critical business applications from external as well as internal originating attacks.

 

 

Fortinet offers a scalable and easy to deploy line of FortiGate IPS security functions that can be installed seamlessly at the network edge or as an IPS solution deployed at the network core to protect critical business applications from external as well as internal originating attacks. In addition, with Fortinet’s SOHO and SME FortiGate models, security administrators are now able to cost-effectively deploy the same level of IPS protection at branch offices that in the past was only available for the corporate headquarters. By tightly integrating industry leading security technologies IPS, antivirus, antispam, web filtering, VPN and Stateful Firewall, Fortinet delivers comprehensive solution for enterprises and service providers to combat the complex network and content level threats that use multiple methods to infect hosts and self-propagate.

IPS Accelerated: ASIC-based hardware design for multi-gigabit throughput Automatic updates of IPS signatures and scanning engines delivered by FortiGuard Subscription Service User-defined custom IPS signatures Bi-directional IPS inspection Signature and protocol anomaly engines Detailed logging and reporting Support for 50+ protocols and applications

IPS Deployment

Deployed in conjunction with an existing firewall, the FortiGate™ IPS security function is deployed in the traffic path inspecting incoming and outgoing packets. The FortiGate system’s highly accurate IPS engine and high availability (HA) configuration ensures maximum availability of network resources.

 

Network Core and Branch Office IPS

FortiGate’s flexible and modular architecture allows for network core deployments to protect against external and internal network level attacks. The FortiGate system’s broad product line allows security administrators to cost effectively deploy IPS protection to smaller branch offices. FortiManager™ centralized management delivers a single console interface to manage hundreds of FortiGate systems.

 

IDS Deployment

For traditional IDS deployments, the FortiGate system’s flexible architecture supports monitoring of traffic from a network tap or mirrored interfaces from the core switch. The FortiGate system can generate detailed traffic logs and alerts for analysis and auditing.