Used Juniper Intrusion Prevention
The Juniper Intrusion Prevention (IDP) modules
protect networks against Trojans, worms, spyware, keyloggers, and
malware. They not only stop the unwanted intrusions, but they
provide information about rogue servers, the types / versions of
applications and operating systems that were unknowingingly added to
the network.
The Juniper IDP modules include: NS-IDP 50, NS-IDP
200, NS-IDP 600C, NS-600F, AND NS-IDP 1100C, and NS-IDP1100F. They
are designed for small to large businesses.
NS-IDP 50
-
Provide full Intrusion Prevention System (IPS),
-
Designed for small and mid-sized businesses,
and remote offices,
-
Can be deployed with third-party bypass
gear.
NS-IDP 200
-
Provide full Intrusion Prevention System (IPS),
-
Designed for mid-sized and large businesses
and service providers,
-
Supports high-availability options.
NS-IDP 600C
-
Provide full Intrusion Prevention System (IPS),
-
Designed for mid-sized and large businesses
and service providers,
-
Supports high-availability options.
NS-600F
-
Provide full Intrusion Prevention System (IPS),
-
Designed for mid-sized and large businesses
and service providers,
-
Supports high-availability options.
NS-IDP 1100C
-
Provide full Intrusion Prevention System (IPS),
-
Designed for mid-sized and large businesses
and service providers,
-
Supports high-availability options.
NS-IDP1100F
-
Provide full Intrusion Prevention System (IPS),
-
Designed for mid-sized and large businesses
and service providers,
-
Supports high-availability options.
Juniper IPS modules identify the traffic flowing
through networks through: Stateful Signature Detection, Protocol
Anomaly Detection, Backdoor Detection, Traffic Anomaly
Detection, IP Spoofing Detection, DoS Detection, Layer 2 Detection,
and Network Honeypot.
The best features include: Protocol Decodes,
Signatures, Traffic Interpretation, Application
Awareness/Identification, Zero-Day Protection, Recommended Policy,
and Multi-Operational Modes. The IPS modules also support granular
traffic control, centralized management, and logging, reporting, and
notification.
Juniper ISG Series
This Juniper ISG series is designed for large
businesses, data centers, and service provider networks. Best
features include: Intrusion Prevention System (IPS), anti-span, Web
filtering, and Internet Content Adaption Protocol (ICAP) antivirus
redirection support.
The ISG 1000 supports up to two security
modules, and the ISG 2000 supports up to three security modules.
These security modules support multi-method detection, combing
different detection mechanisms (such as stateful signatures and
protocol anomaly detection).
