Radware DefensePro IPS

Radware DefensePro IPS is a real-time network attack prevention device that protects your application infrastructure against network & application downtime, application vulnerability exploitation, malware spread, network anomalies, information theft and other emerging network attacks.

DefensePro IPS & Behavioral Protection Models

Radware's award-winning IPS and DoS solution for protecting against emerging network attacks in addition to known, vulnerability-based attacks.

DefensePro OnDemand Switch 3S2 Models

Designed for the protection of large data centers deployed by large enterprises, eCommerce and service providers.

DefensePro 12412 (up to 14 Gbps)
DefensePro 8412 (up to 8Gbps)
DefensePro 4412 (up to 4Gbps)

DefensePro Switch2S1

DefensePro OnDemand Switch 2S Models

Designed for the protection of medium-sized data centers deployed by large enterprises, eCommerce and service providers.

DefensePro 3016 (up to 3Gbps)
DefensePro 2016 (up to 2Gbps)
DefensePro 1016 (up to 1Gbps)

DefensePro X02 Series

DefensePro X02 Series

Targeting branch offices and Internet gateways.

DefensePro 502 (up to 500Mbps)
DefensePro 202 (up to 200Mbps)
DefensePro 102 (up to 100Mbps)

DefensePro Behavioral Protection Models

Radware's solution for high throughput eCommerce and service provider data centers for the prevention of emerging network attacks that threaten revenue generating on-line applications.

DefensePro OnDemand Switch 3S1

DefensePro 12412 Behavioral Protection (up to 12Gbps plus)
DefensePro 8412 Behavioral Protection (up to 8Gbps)
DefensePro 4412 (up to 4Gbps)

Overview
Benefits
Features
Comparison
Data Sheets

All-in-One Attack Protection with IPS, NBA, DoS Protection and Reputation Services

Radware's award-winning DefensePro® is a real-time network attack prevention device that protectsyour application infrastructure against network & application downtime, application vulnerability exploitation, malware spread, network anomalies, information theft and other emerging network attacks.

DefensePro includes the set of security modules – Intrusion Prevention System (IPS), Network Behavioral Analysis (NBA), Denial-of-Service (DoS) Protection and Reputation Engine - to fully protect networks against known and emerging network security threats. It is based on standard signature detection technology to prevent the known application vulnerabilities. The core of DefensePro is patent protected behavioral based real-time signatures technology that detects and mitigates emerging network attacks in real time such as zero-minute attacks, DoS/DDoS attacks and application misuse attacks. All without the need for human intervention and without blocking legitimate user traffic.
DefensePro uses a dedicated hardware platform based on Radware's OnDemand Switch supporting network throughputs up to 12Gbps. It embeds two unique and dedicated hardware components: a DoS Mitigation Engine (DME) to prevent high volume DoS/DDoS flood attacks - without impacting legitimate traffic– and a StringMatch Engine (SME) to accelerate signature detection.
APSolute Vision™ offers a centralized attack management, monitoring and reporting solution across multiple DefensePro devices and locations. It provides the user real-time identification, prioritization and response to policy breaches, cyber attacks and insider threats.

Key Features and Benefits of IPS, NBA, DoS Protection and Reputation Services

Maintain Business Continuity and Productivity		Real-time protection and intrusion prevention against known and emerging network attacks Vulnerability-based attacks that exploit server application weaknesses including Web, Mail, DNS, FTP, SIP, SQL server vulnerabilities Non-vulnerability-based attacks that misuse server resources including: Application DoS – HTTP , SIP, and other flood attacks Authentication defeat - brute force attacks Information theft – application scanning DoS/DDoS flood attacks that misuse network bandwidth resources Real-time Anti-Trojan and Anti-Phishing service, targeted to fight against financial fraud, information theft and malware spread.

Accurate Attack Prevention		Real-time signatures are generated for each attack pattern only, using up to 20 different parameters Block attacks without blocking legitimate users' traffic

High Performance		Platform selection up to 12Gbps plus of full network traffic inspection and protection Dedicated hardware acceleration against DDoS attacks: Block high packets-per-second (PPS) attacks that overuse the CPU resources of your networking and security equipment No need to compromise on security when your network is under attack Maintain excellent user response time even under attack XGE (10Ge) ports

"Pay-As-You-Grow" for Reduced CAPEX		With On Demand Intrusion Prevention System scalability: Scalable platform selection with license upgrades for throughput Minimize initial investment and upgrade costs: buy what you need, upgrade when you need Saving of network and security equipment capacity that would be required to process unwanted traffic - no need to overspend on higher capacity devices just to handle high PPS volumes Two solutions in one box: IPS and DoS mitigation

Ease of Security Management for Reduced OPEX		"Hands-off" solution – self-learning security features that self-adapt to changing network conditions; requires minimal configuration and tuning over time Fully automated prevention through automatic, real-time signatures Full visibility of network behavior, attack trends, and attack details

Key Features and Benefits

APSolute Attack Prevention with DefensePro: Protect Your Application Infrastructure against Known and Emerging Network Threats in Real-Time

Radware’s award-winning DefensePro® is a real-time network attack prevention device that protects your application infrastructure against network and application downtime, application vulnerability exploitation, malware spread, Information theft and other emerging network attacks.

DefensePro includes a comprehensive set of three, essential security modules – DoS Protection, NBA, IPS and Reputation Engine - to fully protect networks against known and emerging network security threats. DefensePro employs multiple detection and prevention engines including signature detection, protocol and traffi c anomaly detection, heuristics and behavioral analysis, reputation feeds. The “secret sauce” of DefensePro is patentprotected, behavioral based real-time signature technology that detects and mitigates emerging network attacks in real-time such as zero-minute attacks, DoS/DDoS attacks, application misuse attacks, network scanning and malware spread. All without the need for human intervention and without blocking legitimate user traffic.
DefensePro uses a dedicated hardware platform based on the company’s OnDemand Switch, which supports network throughputs up to 12Gbps. It embeds two unique and dedicated hardware components: a DoS Mitigation Engine (DME) to prevent high volume DoS/DDoS flood attacks - without impacting legitimate traffic – and a StringMatch Engine® (SME) to accelerate signature based protection.

The synergy of multiple protection modules on the same platform enables more effective protection against attackers who seek to compromise the business assets systematically when compared to stand alone solutions deployment, while providing unifi ed reporting and compliance.

Centralized Threat Management with APSolute Vision Providing Real-Time Identifi cation, Prioritization and Response to Cyber Attacks

APSolute Vision™ accompanies our DefensePro APSolute attack prevention with an enterprise-wide view of security and compliance status from a single console. Data from multiple devices is collected and evaluated in a consolidated view of dashboards and reports. These views provide extensive yet simple drilldown capabilities that allow users to easily drill into information to speed incident identifi cation and provide root cause analyses, improving collaboration between network operations center (NOC) and security operations center (SOC) teams, while accelerating the resolution of security incidents.

DefensePro-screenshot

The real time sonar view allows you to see current attacks in your network.
High risk attacks are located closer to the sonar transmitter. The side meter
indicates the drop intensity of attack traffic.

Business value

Maintain business Continuity of Operations (COOP) even when the network is under attack

Full protection of data center applications against emerging network threats
Maintain network performance even when under high volume network attacks
Maintain excellent user response time even under attack

Best security solution for data centers in a single box

Combining intrusion prevention system (IPS), network behavioral analysis (NBA), denial-of-service (DoS) protection and Anti Trojan & Anti Phishing

Most accurate attack detection and prevention

Blocks attacks without blocking legitimate user traffic

Best in class unified monitoring and reporting solution

Per user customization of real-time dashboards and historical reports
Helps achieve compliance with pre-defined report sets for PCI, HIPAA, SOX etc.

Reduces total cost of ownership (TCO) of security management

Multitude of security tools in a single box
Single management application to manage multiple DefensePro units cross multiple data centers
Full investment protection and extending platform life time thanks to the pay-as-you-grow license upgrade scalability delivering best ROI and CAPEX investment protection

Cutting Edge Network Security Technologies

DefensePro uses multiple technologies to provide APSolute Attack Prevention for data centers and networks:

Network Behavioral Analysis

The Network Behavioral Analysis (NBA) module employs patented behavioral-based real-time signature technology. It creates baselines of normal network, application and user behavior. When an anomalous behavior is detected as an attack the NBA module creates a real-time signature on- the-fly that uses the attack characteristics and start blocking the attack immediately. In case of DDoS attacks it injects the real-time signature into the DME hardware offloading the main CPUs from the excessive unwanted traffic.

Denial-of Service Protection

The Denial-of Service (DoS) Protection module is based on several technologies: signature detection, behavioral based real-time signatures and SYN cookies mechanism that challenge new connections prior to establishing a new session with the servers.

Reputation Services Engine

The reputation engine offers real-time Anti-Trojan and Anti-Phishing service, targeted to fight against financial fraud, information theft and malware spread.

DefenseProDiagramtest1

Network Wide Protections
Behavioral DoS	Protect against known and zero-minute DoS/DDoS flood attacks that misuse network bandwidth resources including: TCP Floods, UDP floods, ICMP floods, IGMP floods and fragmented attacks.
Malware Propagation Prevention and Anti Scanning	Prevent zero-minute malware spread by already infected hosts. Prevents network pre-attack probes (Reconnaissance) including horizontal and vertical TCP & UDP scanning, stealth scanning and ping sweeps.
Server Protections
SYN Protection	Protect against any type of SYN flood attacks using advanced SYN Cookies mechanism. Prevent SYN-ACK Reflection attacks.
HTTP Mitigator	Protect against HTTP page flood attacks that misuse web server resources.
Server-Cracking Protection	Block brute force and dictionary attacks targeting to defeat server authentication schemes including Mail servers (SMTP, POP3, IMAP), FTP servers, SIP servers, MS-SQL and MYSQL servers. Web sites application vulnerability scanning and hacking protection. SIP Invite and Bye floods prevention.
Connection Limit	Defend against connection based attacks such as half open SYN attacks, request attacks and full session attacks.
Stateful Inspection	RFC compliance and state machine verification for various protocols including TCP, ICMP, DNS, HTTPS, SMTP, IMAP, POP3, FTP, SSH.
Bandwidth Management and Access Control
Bandwidth Management	Guarantee bandwidth per application (granular, per user or session basis). Limit bandwidth per application.
Access Control	Access Lists per IP address & protocol; Black/White Lists per IP address per feature.
Management
Alerting	SNMP V1, 2C &3, Log File, Syslog, E-mail.
Forensics	Attack Packet Logging, In-depth Attack Footprint Analysis, Attack Details and Statistics.
Configuration	SNMP V1, 2C, 3, HTTP, HTTPS, SSH, Telnet, Console (user selectable).
Time Synchronization	NTP v2.0
Export Real-Time Signature information	Northbound XML interface exporting behavioral parameters such as: Normal traffic patterns. Attacks real-time signatures of ongoing DoS/DDoS attacks and malware propagation and anti scanning.

Features	X02 Series			OnDemand Switch 2S Series
Model	DefensePro 102	DefensePro 202	DefensePro 502	DefensePro 1016	DefensePro 2016	DefensePro 3016
Network Location	Perimeter			Core Network
Platform	SP1			OnDemand Switch 2S1 Dual PS option is: OnDemand Switch 2S2
Performance1
Capacity2	100 Mbps	200 Mbps	500 Mbps	1 Gbps	2 Gbps	4 Gbps
Throughput3	100 Mbps	200 Mbps	400 Mbps	1 Gbps	2 Gbps	3 Gbps
Max Concurrent Sessions	200000	200000	200000	2500000	2500000	2500000
Maximum DDoS Flood Attack Prevention Rate	40,000 PPS			1,000,000 PPS
Latency	< 120 Micro Seconds			< 60 Micro Seconds
Inspection Ports
10/100/1000 Copper Ethernet	2			12
GE (SFP)	N/A			4
10GE (XFP)	N/A			N/A
Management Ports
10/100/1000 Copper Ethernet	1			2
RS-232	1
Mode of Operation
Network Operation	Transparent L2 Forwarding
Deployment Modes	In-line; SPAN Port Monitoring; and Copy Port Monitoring
Tunneling Protocols Support	VLAN Tagging, L2TP, MPLS, GRE, GTP
IPv6	Support Ipv6 networks and block Ipv6 attacks
Policy Action	Block & Report, Report Only
Block Actions	Drop packet, reset (source, destination or both), suspend (source, source port, destination, destination port or any combination)
High Availability
Fail open/fail-close	Internal fail-open (no fail-close option)			Internal fail-open/fail-close for copper ports; internal fail-close for SFP ports; optional for SFP ports4
Dual Power Supply	No			Optional
Advanced internal overload mechanism6	Yes
Physical
Dimensions	Width: 298 mm (8.9 in.) Depth: 215 mm (6.4 in.) Height: 44 mm (1.3 in.)			1U: Width: 424 mm (12.7 in.) Depth: 600 mm (18 in.) Height: 44 mm (1.32 in.) 2U: Width: 424 mm (12.7 in.) Depth: 600 mm (18 in.) Height: 88 mm (2.64 in.)
Weight	2.1 kg (4.7 lbs)			1U: 9.5 kg (20.9 lbs) 2U: 10.9 kg (24 lbs)
Power Supply	Auto range: 100V-120V/200V-240V AC: 50-60Hz			Auto range: 100V-120V/200V-240V AC 50-60Hz or 38-72VDC
Power Consumption	79W			302W
Heat Dissipation (BTU/h)	68.2			1029
Environmental	Operating temperature: 0°C to 40°C (32°F to 104°F)
Humidity (non-condensing)	5% to 95%
Safety Certifications	UL, IEC #60950-1			EN, UL, CSA, IEC #60950-1
EMC	FCC part 15B class A			EN 55022, EN 55024, FCC Part 15B Class A
Other Certifications	CE, FCC, VCCI, TUV, C-Tick, GOST-R			CE, FCC, VCCI, CB, TUV, UL/cUL, CCC, C-Tick, RoHS
Warranty	1-year hardware and software maintenance
Support	Certainty Support Program

Features	OD Switch 3S2 Series
Model	DefensePro 4412	DefensePro 8412
Network Location	Core Network
Platform	On Demand Switch 3S2
Performance1
Capacity2	4 Gbps	10 Gbps
Throughput3	4 Gbps	8 Gbps
Max Concurrent Sessions	4000000
Maximum DDoS Flood Attack Prevention Rate	10,000,000 PPS
Latency	< 60 Micro Seconds
Inspection Ports
10/100/1000 Copper Ethernet	8
GE (SFP)	4
10GE (XFP)	4
Management Ports
10/100/1000 Copper Ethernet	2
RS-232	1
Mode of Operation
Network Operation	Transparent L2 Forwarding
Deployment Modes	In-line; SPAN Port Monitoring; and Copy Port Monitoring
Tunneling Protocols Support	VLAN Tagging, L2TP, MPLS, GRE, GTP
IPv6	Support Ipv6 networks and block Ipv6 attacks
Policy Action	Block & Report, Report Only
Block Actions	Drop packet, reset (source, destination or both), suspend (source, source port, destination, destination port or any combination)
High Availability
Fail open/fail-close	Internal fail-open/fail-close for copper ports; internal fail-close for SFP and XFP ports; optional for SFP and XFP ports5
Dual Power Supply	Yes
Advanced internal overload mechanism6	Yes
Physical
Dimensions	Width: 424 mm (12.7 in.) Depth: 600 mm (18 in.) Height: 88 mm (1.32 in.)
Weight	18 kg (39 lbs)
Power Supply	Auto range: 100V-120V/200V-240V AC 50-60Hz or 38-72VDC
Power Consumption	426W
Heat Dissipation (BTU/h)	1452
Environmental	Operating temperature: 0°C to 40°C (32°F to 104°F)
Humidity (non-condensing)	5% to 95%
Safety Certifications	EN, UL, CSA, IEC #60950-1
EMC	EN 55022, EN 55024, FCC Part 15B Class A
Other Certifications	CE, FCC, VCCI, CB, TUV, UL/cUL, CCC, C-Tick, RoHS
Warranty	1-year hardware and software maintenance
Support	Certainty Support Program

Actual performance figures may change per network configuration, traffic type, etc.
Capacity is measured as maximum traffic forwarding when no security profiles are configured.
Throughput is measured with behavioral IPS protections and signature IPS protections using eCommerce protection profile.
External fiber fail-open switch with SFP ports is available at additional cost.
External fiber fail-open switches with SFP or XFP ports are available at additional cost.
Overload mechanism is designed to obtain maximum security coverage under extreme traffic loads.

Technical Specifications – Behavioral Protection Models

DefensePro Model	4412 Behavioral Protection	8412 Behavioral Protection	12412 Behavioral Protection
Network Location	Core / Perimeter
Platform	On Demand Switch 3S1
Performance1
Capacity 2	4Gbps	8Gbps	15Gbps
Throughput3	4Gbps	8Gbps	13Gbps
Max Concurrent Sessions	4,000,000	4,000,000	4,000,000
Maximum DDoS Flood Attack Prevention Rate	12,000,000 PPS	12,000,000 PPS	12,000,000 PPS
Latency	< 60 Micro Seconds
Inspection Ports
10/100/1000 Copper Ethernet	8
GE (SFP)	4
10GE (XFP)	4
Management Ports
10/100/1000 Copper Ethernet	2
RS-232	1
Mode of Operation
Network Operation	Transparent L2 Forwarding
Deployment Modes	In-line; SPAN Port Monitoring; and Copy Port Monitoring
Tunneling protocols support	VLAN Tagging, L2TP, MPLS, GRE, GTP
IPv6	Support IPv6 networks and block IPv6 attacks
Policy Action	Block & Report, Report Only
Block Actions	Drop packet, reset (source, destination or both), suspend (source, source port, destination, destination port or any combination)
High Availability
Fail-open / fail-close	Internal fail-open/fail-close for copper ports; internal fail-close for SFP and XFP ports; optional for SFP and XFP ports
Dual Power Supply	Yes	Yes	Yes
Advanced Internal Overload Mechanism5	Yes	Yes	Yes
Physical
Dimensions and Weight	Width: 424 mm (12.7 in.) Depth: 600 mm (18 in.) Height: 88 mm (1.3 in.) Weight: 18 kg (39 lbs)
Power Supply	Auto range: 100V-120V/200V-240V AC: 50-60Hz or 38-72VDC
Power Consumption	451W
Heat Dissipation (BTU/h)	1538
Environmental	Operating temperature: 0°C to 40°C (32°F to 104°F) Humidity (non-condensing):5% to 95%
Certifications	EN, UL, CSA, IEC #60950-1 EMC: EN 55022, EN 55024, FCC Part 15B Class A CE, FCC, VCCI, CB, TUV, UL/cUL, CCC, C-Tick, RoHS
Warranty	1-year hardware and software maintenance
Support	Certainty Support Program

Specifications subject to change without notice.

Actual performance figures may change per network configuration, traffic type, etc.
Capacity is measured as maximum traffic forwarding when no security profiles are configured.
Throughput is measured with behavioral protections using the DoS protection profile.
External fiber fail-open switches with SFP or XFP ports are available at additional cost.
Overload mechanism is designed to obtain maximum security coverage under extreme traffic loads.

Radware DefensePro IPS

DefensePro IPS & Behavioral Protection Models

DefensePro Behavioral Protection Models

All-in-One Attack Protection with IPS, NBA, DoS Protection and Reputation Services

Key Features and Benefits of IPS, NBA, DoS Protection and Reputation Services

Key Features and Benefits

APSolute Attack Prevention with DefensePro: Protect Your Application Infrastructure against Known and Emerging Network Threats in Real-Time

Centralized Threat Management with APSolute Vision Providing Real-Time Identifi cation, Prioritization and Response to Cyber Attacks

Business value

Cutting Edge Network Security Technologies

Technical Specifications – Behavioral Protection Models

Brochures

Case Study

Data Sheets

White Papers

Free Consultation

Unbeatable Prices

Pro Services

24x7 Tech Support