IBM Proventia Network Multi-Function Security MX1004

Transcription

1 Delivering comprehensive protection from a single device IBM Proventia Network Multi-Function Security MX1004 Comprehensive, affordable network protection for any size business The IBM Proventia Network Multi-Function Security (Proventia Network MFS) MX1004 appliance from IBM Internet Security Systems (ISS) is a powerful and affordable solution that is designed to preemptively stop Internet threats including viruses, worms, hackers, spam and unwanted Web content before they penetrate your network and disrupt business. This level of preemptive protection has been difficult for smaller organizations to obtain because of the complexity of most security products that have been available until now. Preemptive, industrial-strength protection in a single device Proventia Network MFS appliances combine IBM ISS industry-leading intrusion prevention technology with firewall, signature and behavioral anti-virus, VPN, Web filtering and anti-spam features. Designed for small businesses or remote offices, Proventia Network MFS MX1004 supports up to 100 concurrent users with comprehensive network protection at an affordable cost. Now small businesses can benefit from enterprise-level, industrial-strength security technology that doesn t require a host of in-house security experts to monitor and manage. Proventia Network MFS is designed to provide preemptive protection from Internet threats without jeopardizing network performance, and it blocks malicious code and blended attacks like MS Blaster, Sasser and SQL Slammer attacks that, in the past, were able to bypass both firewall and anti-virus protection. The ability to stop threats before impact actually helps streamline IT operations by avoiding unscheduled patching and costly security breaches. The Proventia product family also helps improve workforce productivity by protecting against spam, phishing and malware (such as spyware and adware) and preventing unwanted Web browsing to sites that promote such non-business activities as online gambling, shopping and viewing pornography. Proventia Network MFS appliances are designed for ease of use, with prompt updates to protect against future threats. The appliances also offer the flexibility to grow as you grow by enabling you to seamlessly add more security capabilities as needed.

2 Proventia Network MFS MX1004 advantages at a glance Combines intrusion prevention, signature and behavioral anti-virus, firewall, VPN, Web filtering and anti-spam technologies in a single appliance Provides prompt protection from more than 1,000 threats more than all other similar products combined Incorporates prompt updates with the latest security intelligence Is easy to manage Offers the best value for protection available Eliminates the need to acquire, install and manage multiple solutions from different vendors When managed by IBM ISS, is backed by performancebased service level agreements and guaranteed * offerings that provide protection at the highest level Module Protection Delivered Intrusion Prevention 1,000+ vulnerability blocks protecting against 2,500 different attacks Signature Anti-virus 120K known viruses protected by Sophos Behavioral Anti-virus 93%+ of unknown or zero-day viruses blocked Anti-spam 95% of spam blocked Web Filtering 60 million URLs categorized Proventia Network MFS MX1004 features and benefits Stateful inspection firewall prevents access by unauthorized users Virtual private network (VPN) saves money by leveraging the public Internet for communications Intrusion prevention system (IPS) helps to protect your network by blocking suspicious behavior before it causes harm Anti-virus prevents infection by eliminating viruses before they cause harm; new behavioral-based technology fights zero-day viruses without signatures Anti-spam removes spam s that could harm the network, and protects network uptime and employee productivity Web filtering prevents Web surfing to dangerous/inappropriate sites, protecting network uptime and improving regulatory compliance Reporting transforms raw data into informative and intuitive reports to aid decision making Prompt updates provides protection against the newest security threats by updating itself on a regular basis Performance-based protection offers the industry s leading performance-based service level agreements (SLAs) with a cash-back payment* when managed by IBM ISS Spyware blocking blocks internal users from downloading spyware and other malicious code, or surfing to Web sites that host spyware

3 System specifications Proventia Network Multi-Function Security Appliance Proventia MX1004 Hardware specifications Form factor Desktop Interfaces Four 10/100 Mbps (10/100/1000) Weight 1.2 kg (2.6 lbs) Dimensions (W x 250 x 39 x 177mm (9.8 x 1.5 x 6.9 ) H x D) Enclosure Desktop Serial ports One UPS support No AC power Input: Hz, full range Operating Temperature: 0 C 40 C (32 F 104 F) Humidity: C (104 F) Emissions FCC Class A Redundant power No supply Redundant disk No array Operating system Proprietary Mean time between 3.1 years failure Network features Network address translation (NAT) Masquerading/port address translation Reverse NAT Traffic-based access control Dynamic Host Configuration Protocol (DHCP) Point-to-Point Protocol over Ethernet (PPPoE) support Layer 2 mode Open Shortest Path First (OSPF) IP, port, protocol Client and server

4 VPN features** Internet Protocol Security (IPSec) with Internet Key Exchange (IKE) Layer Two Tunneling Protocol (L2TP) support Encryption algorithms Authentication algorithms Perfect forward secrecy (Diffie- Hellman IPSec NAT traversal Public Key Infrastructure (PKI) support Interoperability with major VPN vendors (IPSec) Certifications Microsoft Windows XP client wizard DES, 3DES, AES MD5, SHA-1 Groups 1, 2, 5 NSS, ICSA firewall corporate Included Web filtering URL blocking More than 60 million URLs categorized Rate of URL More than 100,000 updated URLs daily database updates Number of URL 60 categories Image analysis Text analysis User-configurable include/exclude lists Spyware analysis Anti-spam Spam-detection rate More than 95 percent False-positive rate 0.01 percent (1 in 10,000) Subject-line tagging Automatic spam deletion Spam sample More than 200,000 database Supported mail protocols (Simple Mail Transfer Protocol [SMTP] and Post Office Protocol 3 [POP3])

5 Signature anti-virus features Protocols protected HTTP, FTP, SMTP, POP3 Inbound/outbound inspection attachment inspection (including compressed files) Zip MIME/UU LHA/LZH TAR GZIP ARJ CAB PKLite LZEXE Behavior-based anti-virus features Protocols protected HTTP, FTP, SMTP, POP3 Intrustion prevention system (IPS)/intrustion detection system (IDS) features Number of protocols More than 137+ inspected Number of attack More than 2,500+ signatures Blocking Number of blocked More than 1,000 threats out-of-thebox Drop offending packet Reset connection Block connection Block worm Block Trojan Block intruder Neuter attack Block future traffic Certifications NSS, ICSA-pending Stops zero-day variants such as Zotob, Blackworm and others Spyware analysis

6 Performance VPN performance Maximum recommended users*** 100 Maximum VPN 3DES encryption speed 25 Mbps Stateful throughput speed (firewall only) Full inspection speed firewall, IPS and Web filtering 100 Mbps 100 Mbps Maximum VPN AES encryption speed Maximum VPN 3DES encryption speed with hardware acceleration 50 Mbps N/A Full inspection speed intrusion prevention, Web filtering and antivirus (mail only) Full inspection speed intrusion prevention, Web filtering and antivirus (mail, FTP, Web) 43 Mbps 34 Mbps Maximum VPN AES encryption speed with hardware acceleration VPN capacity or maximum recommended tunnels (site-to-site/ remote) N/A 100 Maximum connections per second 2,125 Logging/notification Event logging Maximum concurrent sessions 101,000 Simple Network Management Protocol (SNMP) (with both anti-virus and anti-spam) Maximum number of 1K messages throughput per hour Maximum number of 1K messages with 500K attachment throughput per hour 1,

7 High-availability/failover Active/passive VPN user authentication Internal database RADIUS (external) database LDAP support Through RADIUS RSA secureid Through RADIUS (external) database Xauth over RADIUS for IPSec VPN IP/MAC address binding Management Centralized (with IBM Proventia Management management SiteProtector system) Local management Web-based Multiple (with SiteProtector system) administrators and user levels External (with SiteProtector system) administrator database Multilanguage No support Secure shell (SSH) SSH access Customer support Hours available standard Hours available premium Number of support incidents Number of designated callers Additional designated callers Additional languages Customer portal Customer knowledgebase Warranty Advanced hardware replacement Certifications 24x7x365 24x7x365 Unlimited From two to five Optional Optional One year + contract SCP (support center practices) J.D. Power and Associates NSS ICSA firewall corporate ** Free VPN client available using Windows XP L2T VPN client or by purchasing a separate VPN client. *** Capacity ratings based on nodes represent general guidelines about the size of the network that should be placed behind a particular Proventia Network Multi-Function appliance model.

8 For more information Learn how the Proventia Network Multi-Function Security appliance can protect your business ahead of the next Internet threat, and dramatically simplify your security management. Be sure to ask if your company qualifies for a 30-day evaluation. For more product information, visit: index.html Get your copy of the IBM ISS executive briefing on preemptive protection at To find an IBM ISS office or reseller, contact a location near you or visit: ibm.com/services/us/iss Copyright IBM Corporation 2007 IBM Global Services Route 100 Somers, NY U.S.A. Produced in the United States of America All Rights Reserved IBM and the IBM logo are trademarks or registered trademarks of International Business Machines Corporation in the United States, other countries, or both. Proventia and SiteProtector are trademarks or registered trademarks of Internet Security Systems, Inc. in the United States, other countries, or both. Internet Security Systems, Inc. is a wholly-owned subsidiary of International Business Machines Corporation. tion. Microsoft and Windows are trademarks of Microsoft Corporation in the United States, other countries, or both. Other company, product and service names may be trademarks or service marks of others. References in this publication to IBM products or services do not imply that IBM intends to make them available in all countries in which IBM operates. All performance data contained in this publication was obtained in the specific operating environment and under the conditions described above and is presented as an illustration. Performance obtained in other operating environments may vary and customers should conduct their own testing. * Money-back payment (for Managed Protection Services - Premium Level only): If IBM Internet Security Systems fails to meet the Security Incidents Prevention Guarantee, client shall be paid US$50,000 for each instance this guarantee has not been met. Please see IBM Internet Security Systems SLAs for more details. GTD01134-USEN-00