[ Up ] [ Firewalls ] [ VPNs ] [ Intrusion Detection ] [ Scanning ] [ Access Control ] [ Policy Management ] [ Consulting Services ]

Intrusion Detection

Network-based Intrusion Detection Systems (IDSs) analyze the packet datastreams within the network, searching for unauthorized activity, such as attacks by hackers. When such unauthorized activity is detected, the system can send alarms to a management console with details of the activity and can often shut down the unauthorized session. In comparison to physical security, IDS systems are equivalent to tideo cameras and motion sensors; they detect unauthorized of suspicious activity and are combined with an automated response system such as a watchguard to stop the activity.

Cisco Secure Intrusion Detection System

The Cisco Secure Intrusion Detection System, formerly known a Cisco NetRanger® software, is a real-time network-based IDS that is deployed in a wide variety of critical networking environments, from major financial institutions to military organizations. The system has network applances, called Sensors to detect unauthorized activity traversing a network location and send alarms back to a central management station, called the Director. Alarms contain such information as the source destination, type, and context of the attack.

In addition, the sensors can provide an intelligent and appropriate response by cutting off the attack in midstream by either dropping the connection or dynamically changing the Access Control Lists (ACLs) of Cisco routers to block the attacking IP address for a set period of time.

Key Strengths / Features / Benefits

• Scalability — Cisco Secure IDS is built to support large networked environments.

• Performance — Cisco Secure IDS accesses the network data via a passive "tap" resulting in minimal impact on the network.

• Flexibility — Cisco Secure IDS can be placed in almost any networked location and can also receive alarms from the CSIS residing on a wide range of Cisco routers, using their security capability to its advantage.

• Visibility — Cisco Secure IDS identifies attacks within the packet datastream, even when those attacks some from authorized users whose traffic is entering or leaving the protected network.

[ E-Commerce ] [ LAN ] [ Security ] [ WAN ] [ Solusi ]