Symantec offers monitoring and intrusion prevention

Network Security 7100 series designed to stop infections from spreading

Iain Thomson in San Francisco, vnunet.com 28 Jul 2004

Symantec will next month release intrusion prevention hardware aimed at monitoring and reducing internal security risks.

The Network Security 7100 series is a family of three intrusion prevention devices placed at key points in the network, which can be configured to stop infections from spreading. They are capable of traffic throughput of 50Mbps to 2Gbps.

The company said that the products combine technologies such as protocol anomaly detection, vulnerability attack interception, signature recognition, denial-of-service and scan detection, and IDS evasion detection.

Symantec claimed that this design will protect customers against intrusions, malicious code, network infrastructure attacks, application exploits, scans, probes, denial-of-service attempts, backdoors, buffer overflow attempts and blended threats such as MS Blaster and SQL Slammer.

In the event of a security threat the devices can move from monitoring to prevention with a single mouse click.

"We are rolling out the devices with a powerful management interface, with a lot of automation," said Sandeep Kumar, director of product management at Symantec.

"The three offerings can be deployed at various points: the low-end model for branch offices and large distribution sites, and the higher-end hardware for the network core."

The 7120 is the entry level model with four 10/100 Base-T monitoring points, single power supply and a maximum data throughput of 200Mbps. The device can be purchased with licences for 50Mbps or 100Mbps and upgraded as required.

The 7160 and 7161 are both capable of 2Gbps throughput, and have dual power supplies and eight monitoring points. The latter is capable of working with both Gigabit Ethernet and 1000 Base-X fibre links.

They cost $7,995, $23,995 and $26,995 respectively, including a one-year gold subscription support licence. UK pricing will be announced shortly.

All devices will be sold exclusively through the channel, but Symantec will carry out support.

They are all shipping with the company's Live Update software turned on by default, and contain software which allows them to be run remotely as part of a managed service offering.

See also: