Internet Security Systems (ISS) has shipped the first model in its Proventia G Series of intrusion prevention appliances. The series allows IT administrators to switch from active detection to passive intrusion prevention without disrupting network traffic.
The appliances, priced from US$11,995, can detect and block both known and unknown attacks, said ISS executives, including denial-of-service (DoS) attacks, worms, and Trojan horses.
In active mode, the appliance acts as an in-line device, and inspects all incoming traffic for malicious code and suspected attacks. In passive mode, the device doesn't perform active blocking, but only detect actual and potential attacks.
A third simulation mode lets IT managers report what it would have blocked had it been enabled, giving security staff a chance to test the accuracy of the appliance before putting it in-line.
The first appliance in the line, the high-end Proventia G200, provides coverage for up to 200Mb/s without slowing down the network, said ISS. A second model, the G100, which will process intrusion defenses at 100Mb/s, will ship later this year.