StoneGate IPS-1030

IPS-1030-10601

The StoneGate™ IPS-1030 Intrusion Prevention System is a proactive defense system designed to detect malicious packets within regular network traffic and prevent intrusions by blocking the offending traffic automatically before any damage occurs. The new SSL inspection feature allows monitoring encrypted Web traffic and preventing disruptions to business traffic.

StoneGate IPS-1030 is designed for branch offices, DMZ’s, extranet or internal network segments. The appliance features sensor and analyzer functionalities, giving flexible protection for environments requiring ultimate ease of usage. For most capacity demanding environments StoneGate IPS-1030 can be configured to feature separate sensor or analyzer mode.

StoneGate IPS-1030 sensor appliances can protect up to two inline segments. They have a bypass interface pair for each inline segment and two standard Ethernet interfaces. Standard interfaces can be used as capture interfaces for intrusion detection and one of them is needed for StoneGate management traffic.

Combined with StoneGate Firewall, IPS-1030 with transparent access control forms a multidimensional defense system where several security layers communicate seamlessly together. This field-proven technology provides comprehensive protection of the whole network, raising network security to a previously unseen level.

The StoneGate IPS-1030 and all other StoneGate appliances offer comprehensive network security with easy deployment and unified management.

Overview
Portfolio
Deployment
Model Conperason
Data Sheets

Intrusion Prevention System - What is StoneGate IPS?

Spyware, worms, and peer-to-peer programs slow down network performance and may even take the services down. In today’s business environment where competition is hard and decisions have to be made fast, the availability of business systems is essential. If the information is not available when it is needed, productivity suffers. This means increased risks for the business.

Intrusion Prevention Systems and StoneGate

StoneGate IPS is a modular, yet powerful tool to secure your internal networks. With StoneGate IPS you can efficiently detect, identify and stop network traffic abuse and complemented by the Transparent Access Control module you can easily and efficiently add segmentation to your networks, thus considerably reducing the risk of far-reaching infections.

The costs of cleaning all infected computers in the network as well as network downtime can be fatal to any organization. StoneGate IPS offers reliable and cost-efficient protection for data center services as well as prevents client-slide attacks against workstations, offering organizations significant cost savings and ensuring business continuity at all times.

Unlike traditional attacks that originate from outside the network, client-side attacks are initiated within the organization’s internal network. When users are browsing infected websites, client-side attacks come in as responses to internal network user requests. At gigabit network speeds, these attacks can cause significant infection and damage across the network. StoneGate IPS inspects network traffic and prevents client-side attacks even if they are hidden in encrypted traffic.

Control with Web filtering

The StoneGate IPS gives administrators unprecedented monitoring of network protocols and applications, as well as capabilities to control Web content.

Malicious websites can be blocked automatically and unwanted web content can be detected/stopped with built-in category based web filtering at any network location. Web filtering offers efficient protection against phishing attacks, drive-by-exploits, connections to Botnet command & control centers and drop zones, among others.

Data center service protection

The high-performance StoneGate IPS offers reliable and cost-efficient protection for data center services. The solution provides virtual patching for vulnerable servers waiting for patching within the next available maintenance window.

The StoneGate IPS ensures advanced protection under real-life traffic conditions without putting service availability at risk. The solution also scales easily when bandwidth requirements increase and new servers are added to the data center.

Product Overview

StoneGate IPS-3205

With 20 Gbps inspection performance modular StoneGate IPS-3205 offers the highest level of security without compromising traffic speed across the network.

StoneGate IPS-3201

With 5 Gbps performance modular StoneGate IPS-3201 appliance is targeted for data center, perimeter and intranet protection where multi-gigabit performance is required

StoneGate IPS-1205

With 2 Gbps performance, the StoneGate IPS-1205 offers the highest level of security without sacrificing the speed of traffic across the network. The appliance is easy to deploy anywhere in the network and equipped with two inline pairs it can operate at two inspection locations simultaneously.

StoneGate IPS-1060

With the capacity ranging from 350 to 600 Mbit/s StoneGate IPS-1060 is designed for branch offices, DMZ’s, extranet or internal network segments. The appliance is available as an IPS Sensor or combined with Analyzer functionality. Protects up to two inline segments.

StoneGate IPS-1030

With the capacity of 200 Mbit/s StoneGate IPS-1030 is designed for perimeter protection and branch offices. The appliance is available as an IPS Sensor or combined with Analyzer functionality. Protects up to two inline segments.

Deployment

StoneGate IPS supports both Intrusion Prevention System (IPS) and Intrusion Detection System (IDS) modes as well as the combination of these two, ie the hybrid mode.

IPS (Intrusion Prevention System)

In the IPS mode the device is configured inline between the network traffic paths.

ILLUS_ips-deployment

Depending on the IPS appliance model, the inline sensor is able to inspect 1-4 physical segments simultaneously or more if VLAN tagging is used. IPS is able to restrict traffic by blocking the traffic or sending requests for a firewall or other Inline IPS to isolate the segment from other networks using a blacklisting. IPS access control functionalities can be extended by using Transparent Layer-2 Firewall features.

IPS mode is good to block attacks, if you can identify a clear threat path, for example, traffic from the Internet to DMZ segment, or traffic from internal network to Internet.

IDS (Intrusion Detection System)

In the IDS mode the device is passively monitoring a network traffic.

ILLUS_ids-deployment

The IDS mode can be used for aggregating network traffic from multiple VLANs or physical traffic sources, such as switches and WireTAPs, into one centralized IDS sensor or IDS cluster. IDS is able to restrict traffic by sending resets or requesting a firewall or Inline IPS to isolate the segment from other networks using a blacklisting.

The IDS mode is good when you have to protect large Local Area Network (LAN) segments. IDS is able to detect hostile machines even if the devices would not communicate to the other network segments.

Hybrid mode

In the hybrid mode, the same device is configured to function in both modes.

ILLUS_hybrid-deployment

Using the same device in both modes is an efficient and cost-effective solution for smaller implementations.

The StoneGate IPS uniquely integrates the most advanced security techniques with our patented high availability technologies and sophisticated next generation management so your business will never miss a beat… no matter what threat comes your way. In fact, according to industry experts like NSS Labs and ICSA Labs, the StoneGate IPS offers one of the highest levels of protection, performance and manageability at the lowest total cost of ownership on the market today – as much as 30-70% than other products. From the largest data centers and enterprise networks to your remote offices, we offer solutions to fit your specific needs.

Appliance Specifications	IPS-1030	-Z	IPS-1060	-P
Software	Sensor	Analyzer	Sensor
Inspected throughput	200 Mbps		350 Mbps	600 Mbps
Latency	< 150 μs		< 150 μs
Connections/s	15 000		30 000
Concurrent connections	300 000		400 000
SSL inspection client/server side	40 Mbps / 40 Mbps		60 Mbps / 60 Mbps
Network Interfaces	6 x 10/100/1000	2 x 10/100/1000	6 x 10/100/1000
Bypass interface pairs	2	-	2
Layer-2 firewall	yes	-	yes
Analyzer	option	yes	option
Web filtering	option	-	option
Number of detection signatures	3 500+		3 500+
Inline serial clustering /HA	yes		yes
VLAN inspection	4 094		4 094
Dynamic overload handling	yes	-	yes
Form factor	1U rack		1U rack
Dimensions (W x H x D)	425 x 44 x 362 mm 16.73" x 1.73" x 14.25"		425 x 44 x 362 mm 16.73" x 1.73" x 14.25"
Module slots	-		-
Redundant power supply	-		-

Appliance Specifications	IPS-1205	IPS-3201	IPS-3205
Software	Sensor	Sensor	Sensor
Inspected throughput	2 Gbps	5 Gbps	13 Gbps
Latency	< 150 μs	< 150 μs	< 150 μs
Connections/s	50 000	240 000	750 000
Concurrent connections	1 300 000	5 000 000	15 000 000
SSL inspection client/server side	350 Mbps / 350 Mbps	yes / yes	yes / yes
Network Interfaces	6 x 10/100/1000	2 x 10/100/1000	2 x 10/100/1000
Bypass interface pairs	2	*max 6	*max 6
Layer-2 firewall	yes	yes	yes
Analyzer	option	yes	yes
Web filtering	option	option	option
Number of detection signatures	3 500+	3 500+	3 500+
Inline serial clustering /HA	yes	yes	yes
VLAN inspection	4 094	4 094	4 094
Dynamic overload handling	yes	yes	yes
Form factor	1U rack	2U rack	2U rack
Dimensions (W x H x D)	426 x 44 x 400 mm 16.77" x 1.73" x 15.7"	437 x 89 x 450 mm 17.2" x 3.5" x 17.7"	437 x 89 x 450 mm 17.2" x 3.5" x 17.7"
Module slots	-	3	3
Redundant power supply	-	yes	yes