|

Intrusion Prevention
High Quality Attack Database
The Netsafe UTM advanced intrusion prevention engine detects and blocks a
large variety of known attacks and threats inside the data stream. The
advanced quality attack database currently contains more than 6000 known
attacks. This means maximum security and protection.
Auto-Prevention
Netsafe UTM is equipped with a very unique feature called Auto-Prevention.
This means that the Netsafe UTM comes with predefined security policy levels
which contain how to react automatically to the different attacks. Through
the Auto-Prevention feature intrusion prevention gets usable and secure with
a single click and without individual customization.
Advanced Attack Prevention
Advanced prevention and detection mechanisms against major threats and
attacks like port scans, DoS (denial of service) attacks, buffer overflows,
UDP attacks, application and protocol anomaly attacks, packet fragmentation
attacks ( to hide attacks from regular Intrusion Prevention Systems, attacks
are not sent in one data packet but are split into several data packets. To
prevent attacks that are fragmented Netsafe UTM not only looks at single
packets but also reassembles complete data streams and does checks over the
complete data stream)
Automatic Update
The attack signature database is updated automatically (up to hourly)
Stateful Intrusion Prevention
The Netsafe UTM intrusion prevention also supports sessions. This maximizes
the detection rate significantly.
RFC compliance checks
Communication protocols are checked for RFC compliance. This gives
additional security against attacks. Many protocols like http, ftp, pop3,
smtp, dns, tcp, udp, rpc are checked for their RFC compliance.
|