Intrusion Prevention System
The convenience of the Internet has created a tremendous worldwide venue for commerce and information sharing. Unfortunately, this same convenience creates tremendous network security problems. In the past, the industry used firewalls as the main tool to ward off intrusions by hackers. But as network attack patterns become more varied and complicated, a simple firewall fails to meet the security requirements of the modern commercial network environment.
|
BroadWeb's NetKeeper series, an Gigabit-level Multi-port Intrusion and Prevention Systems (IPS), is the most recent innovation in the invasion detection arms race. It not only detects intrusion accurately but real-time blocks malicious packets before their entries. |
|
Key Features
|
Stateful Traffic Inspection |
Anomaly Detection |
Signature Detection |
|
• IP Defragment and TCP Reassembly • Protocol Normalization • Protocol Analysis • Protocol Enforcement • Protocol Tunneling • Evasion Prevention |
• DoS / DDoS • Port Scanning • Application Anomaly • Spoof Detection • IP Sweeping |
• User-defined Signature • Real-time Signature Update • Virtual IPS • Per Rule and VIPS Rate Limit • Per Rule and VIPS Quota Control |
|
Build-in Firewall ACL Function |
High Availability |
|
|
• TCP / UDP / ICMP SPF |
• Build-in Hardware Bypass Designed |
Model Specifications
|
Model |
NK-3550 |
NK-5600 |
NK-5900 |
|
Throughput |
200Mbps |
500Mbps |
800Mbps |
|
Latency |
<200μsec |
< 200μsec |
< 200μsec |
|
Connection Rate |
12,000 |
12,000 |
12,000 |
|
Concurrent Sessions |
512K+ |
1M+ |
1M+ |
|
L4 ACL |
4096 |
4096 |
4096 |
|
Security Signature |
2300+ |
2300+ |
2300+ |
|
10/100/1000 Copper |
5 |
5 |
5 |
|
Mini-GBIC |
N/A |
N/A |
4 |
|
10G |
N/A |
N/A |
N/A |
|
IPS Segments |
2 |
2 |
4 |
|
IDS Port |
5 |
5 |
9 |
|
Management Interface |
1 |
1 |
1 |
|
Traffic Mirroring |
1 |
1 |
1 |
|
L2 Fallback |
1 pair |
2 pair |
2 pair |
|
Zero Power Bypass |
1 pair |
2 pair |
2 pair |
|
Link Fault Pass Through |
Yes |
Yes |
Yes |
|
High Availability |
AA/AS |
AA/AS |
AA/AS |
|
Form Factor |
1U |
1U |
1U |
|
H/W/D (mm) |
44/443/381 |
44/443/381 |
44/443/381 |
|
Weight (kg) |
4.94 |
4.94 |
4.94 |
|
Redundant Power Supplies |
N/A |
N/A |
N/A |
|
Amperage (A) |
5/3 |
5/3 |
5/3 |
|
Input Voltage(V) |
AC 100~240 |
AC 100~240 |
AC 100~240 |
|
Frequency (Hz) |
47~63 |
47~63 |
47~63 |
* Built-in 2 x 10G interface module. The 4 x 10G interface module is optional.
** Depends on the type of 10G interface module.
Model Specifications
|
Model |
NK-7210 |
NK-7300 |
NK-8210 |
NK-8220 |
|
Throughput |
1.5Gbps |
2Gbps |
2.5Gbps |
5Gbps |
|
Latency |
< 200μsec |
< 200μsec |
< 200μsec |
< 200μsec |
|
Connection Rate |
22,000 |
30,000 |
30,000 |
30,000 |
|
Concurrent Sessions |
1M+ |
2M+ |
2M+ |
2M+ |
|
L4 ACL |
4096 |
4096 |
4096 |
4096 |
|
Security Signature |
2300+ |
3000+ |
3000+ |
3000+ |
|
10/100/1000 Copper |
5 |
7 |
7 |
5 |
|
Mini-GBIC |
4 |
8 |
8 |
8 |
|
10G |
N/A |
N/A |
2 |
2/4* |
|
IPS Segments |
4 |
7 |
8 |
8 |
|
IDS Port |
9 |
15 |
17 |
15/17** |
|
Management Interface |
1 |
1 |
1 |
1 |
|
Traffic Mirroring |
1 |
1 |
1 |
1 |
|
L2 Fallback |
2 pair |
3 pair |
3 pair |
2 pair |
|
Zero Power Bypass |
2 pair |
3 pair |
3 pair |
2 pair |
|
Link Fault Pass Through |
Yes |
Yes |
Yes |
Yes |
|
High Availability |
AA/AS |
AA/AS |
AA/AS |
AA/AS |
|
Form Factor |
2U |
2U |
2U |
2U |
|
H/W/D (mm) |
88/431/392.7 |
88/431/392.7 |
88/433/512 |
88/433/512 |
|
Weight (kg) |
12.5 |
12.5 |
13 |
13 |
|
Redundant Power Supplies |
Yes |
Yes |
Yes |
Yes |
|
Amperage (A) |
8/5 |
8/5 |
8/5 |
8/5 |
|
Input Voltage(V) |
AC 100~240 |
AC 100~240 |
AC 100~240 |
AC 100~240 |
|
Frequency (Hz) |
47~63 |
47~63 |
47~63 |
47~63 |
* Built-in 2 x 10G interface module. The 4 x 10G interface module is optional.
** Depends on the type of 10G interface module.