Features And Benefits; Comprehensive Protection - McAfee INTRUSHIELD 1200 Datasheet

Data Sheet | McAfee Network Protection Solutions
inflict damage. IntruShield's next-generation technology
delivers unparalleled features, including "out-of-the-box"
default IPS blocking, pre-configured Recommended for
Blocking policies, built-in spyware and VoIP protection,
virtual IPS, and an integrated internal firewall. And the
IntruShield portfolio of appliances is backed by McAfee—
the largest dedicated security company and the most
trusted name in the industry.

Features and Benefits

Comprehensive protection

Broad threat prevention—IntruShield's purpose-
k
built intrusion prevention appliances deliver the
most comprehensive threat prevention by proactively
protecting endpoints and network infrastructure from
known, zero-day, and DoS attacks, as well as threats like
spyware, VoIP vulnerabilities, malware, botnets, network
worms, Trojans, and peer-to-peer applications
Built-in anti-spyware protection—Provides enhanced
k
security by integrating multi-layered protection against
spyware, adware, dialers, keyloggers, password crackers,
and remote-control programs. IntruShield's spyware
protection helps reduce IT costs, prevents potential privacy
breaches, and protects confidentiality by proactively
preventing the download of these unwanted programs
while blocking spyware communication and propagation
Built-in, advanced Web-client protection—Proactively
k
protects Web browsers and desktops from cyber-
attacks, spyware, botnets, and other forms of malware.
It prevents the download of unwanted programs while
protecting against unauthorized network access.
IntruShield's built-in Web-client protection complements
McAfee Perimeter and System Protection Solutions by
providing an additional layer of network protection
Next-generation DoS prevention—The industry's most
k
advanced, next-generation DoS-prevention technology
delivers comprehensive, real-time protection against
sophisticated DoS attacks, cyber-attacks, and cyber
extortion. Multi-layered threshold, profile-based,
and SYN cookie technology—in combination with
IntruShield's unrivaled virtual IPS capabilities—deliver
highly granular protection against a broad spectrum of
DoS attacks, including DoS, DDoS, and SYN flood attacks
Infrastructure protection—Provides preemptive, zero-
k
day vulnerability protection against threats and attacks
that target mission-critical routers, switches, perimeter
firewalls, and DNS servers. Provides the only effective
means to protect critical network infrastructure during
windows of vulnerability
Unrivaled botnet prevention—Industry's only network-
k
based security solution to provide comprehensive,
layered, and proactive blocking of malicious distributed
botnets. IntruShield protects against the growing threat
of botnets by identifying them as a distinctive category
of attack and proactively blocking their installation,
communication, and activation through the Internet
VoIP vulnerability protection—IntruShield's integrated
k
VoIP security proactively protects mission-critical VoIP
infrastructure and applications by accurately detecting
and blocking known, zero-day, and DoS attacks.
IntruShield protects against underlying VoIP protocol
vulnerabilities while preserving VoIP application and
voice-quality integrity
Encrypted attack prevention—Industry's first and
k
only network IPS to securely and proactively protect
against both clear-text and encrypted attacks (I-2700).
IntruShield's advanced, real-time SSL decryption and
inspection technology dramatically increases network
security coverage by protecting critical e-commerce
infrastructure
IPS and internal firewall—Integrated network IPS and
k
stateful internal firewall capabilities deliver unrivaled
internal system protection, network infrastructure
protection, and enterprise-wide policy enforcement
Accurate protection
Risk-aware intrusion prevention—Risk-aware IPS
k
delivers significant operational efficiencies by providing
the ability to intelligently identify and block the most
relevant alerts and attacks. Integration with market-
leading Foundstone VM solutions automatically identifies
and highlights risks. Enables targeted, prioritized
risk management by importing and correlating risk
assessment information from Foundstone, as well as
open-source VA systems such as Nessus
Signature, anomaly, and DoS analysis—IntruShield's
k
unmatched architecture integrates a variety of advanced
detection methods—including signature, application,
and protocol anomaly, shell-code detection algorithms,
and next-generation DoS/DDoS prevention—to deliver
the most accurate protection available against today's
threats and attacks
Unmatched detection accuracy—IntruShield performs
k
stateful traffic inspection with thorough parsing of over 100
protocols, while leveraging over 3,000 high-quality, multi-
token, multi-trigger signatures to provide the most accurate
detection in the industry. IntruShield's unmatched
accuracy allows you to confidently block threats and
attacks in real time without affecting legitimate traffic