McAfee INTRUSHIELD 1200 Datasheet page 3

Data Sheet | McAfee Network Protection Solutions
Backed by McAfee—Proven protection, unmatched
k
security knowledge, and continuous proactive security
research from the world's largest dedicated security
company. McAfee, the most trusted name in the industry
Scalable and manageable
Out-of-the-box default blocking—IntruShield is pre-set
k
for Default IPS Blocking, and comes pre-configured with a
Recommended for Blocking policy that provides accurate
and proactive blocking for hundreds of attacks straight
out of the box. Recommended for Blocking signatures
are continuously updated by McAfee to provide
comprehensive protect ion against new threats
Easy-to-use centralized management—A single
k
management console delivers simple, centralized,
Web-based management of IntruShield appliances
and policies. Plus, a rich set of fourteen ready-to-
use, pre-defined IPS security polices allow for easy
customization. IntruShield's easy-to-use management
reduces complexity, maximizes IT efficiencies, and
lowers operational costs. IntruShield Security Manager
is provided at no cost for management of up to two (2)
IntruShield appliances
Integrated user authentication—Integrated user-
k
authentication capabilities deliver administrative and
user-management efficiencies. Integration provides
system operators and users with comprehensive
authentication support to external databases, including
Radius, LDAP, and TACAS
Automated real-time threat updates—Innovative,
k
automated process delivers real-time signature
updates without requiring sensor reboots and provides
protection against newly discovered vulnerabilities while
eliminating manual updates and network downtime
Always on management with automated disaster
k
recovery—Delivers uninterrupted, highly available
management capabilities by providing active/standby
management server technology for the IntruShield
Security Management (ISM) system. Automated failover
and fail-back technology enables disaster recovery of
critical configuration data in the event of failure. Always
on management ensures the continuity of critical
network protection and supports corporate disaster
recovery policies
Unprecedented virtual IPS—IntruShield's unique and
k
flexible virtualization capability extends to both IPS
and the internal firewall, supporting up to 100 virtual
IPS sensors per physical device (100 for I-2700, 32 for
I-1400, 16 for I-1200), each virtual IPS with its own highly
customized and granular security policy
Advanced intrusion forensics—Delivers unique forensic
k
features to analyze key characteristics of known and
zero-day threats and intrusions. IntruShield's powerful
forensic capabilities provide highly actionable and
accurate information and reporting related to intrusion
identification, relevancy, direction, impact, and analysis
Flexible deployment—Unprecedented flexibility of IPS or
k
intrusion detection system (IDS) deployment—including
in-line, port clustering, high availability, span, and
tap modes—suits any network security architecture.
IntruShield's flexible architecture allows SMBs to
automatically migrate from reactive intrusion detection
to proactive intrusion prevention
Award-winning ASIC-based architecture
Purpose-built hardware—IntruShield appliances are
k
purpose-built for mission-critical intrusion prevention,
and are engineered using multiple state-of-the-art
network processors, co-processors, FPGAs, and general-
purpose processors. IntruShield's award-winning
architecture incorporates dedicated, high-speed
hardware to achieve unmatched accuracy, performance,
and proactive protection
Investment protection—Industry's most advanced
k
architecture, purpose-built for long product life cycles,
allows for continuous next-generation security and
feature enhancements. Continues to provide advanced
protection against today's threats, including spyware,
malware, DoS, VoIP vulnerabilities, botnets, and
encrypted attack protection, while never requiring
appliance hardware upgrades
Integrated network and host IPS—Provides
k
breakthrough integration by enabling host (McAfee Host
Intrusion Prevention Solution) and network (IntruShield)
IPS security-event aggregation and coordination on a
single IntruShield Security Management console
High-availability deployment—Complete, stateful
k
failover capabilities deliver high-availability (HA)
configuration between a pair of primary and failover
IntruShield appliances. IntruShield's HA configuration
feature allows transparent Layer 7 stateful failover,
thereby avoiding a single point of failure