StoneGate Intrusion Prevention System (IPS) protects the internal network while StoneGate Firewall/ VPN provides perimeter protection and secure connectivity between branch offices.

StoneGate IPS is a modular yet powerful tool to secure your internal networks. With StoneGate IPS you can efficiently detect, identify and stop network traffic abuse and added with Transparent Access Control module you can easily and efficiently add segmentation to your networks thus reducing the risk of far-reaching infections considerably.

Enquire about this product

---

---

Key Features

• Protects vulnerable applications and operating systems.  Business-critical applications and servers must run 24 hours a day. If there is security vulnerability in the application or in the operating system then it should be fixed (patched) as soon as possible. But bringing down business-critical service for maintenance means lost revenue. Normally business-critical applications have scheduled maintenance windows every month, but that is too late because the security vulnerability is there right now and anybody can exploit it. The solution for this is to put StoneGate IPS in front of the application. It stops all exploits that are trying to use the vulnerability in business-critical applications or servers.
• Stops worms, P2P, and spyware.  There should not be worms, spyware, or peer-to-peer traffic in corporate network. StoneGate IPS can remove them from your corporate network traffic and therefore increase the network bandwidth available for your business operations.
• Accelerates incident handling.  StoneGate IPS stops attacks before they damage the target server, therefore eliminating incident costs. StoneGate IPS provides a large variety of information about attempted attacks and its Incident Management feature can be used to collect that information in one place. This information can be used to create Internet abuse reports so that system administrators of the attacking network segment are notified about attacks. This helps to prevent attacks from reoccurring and allows informing responsible parties about the attack.
• Stops attacks against web applications.  Enterprises strive to offer flexible and easy-to-use services for their customers, partners, and employees. In many cases this means that customers have a web interface to critical core-business services. Although web access is a very convenient way for customers to access services it also presents a new risk to the core-business. StoneGate IPS prevents attacks against these services and shows what is going on in the DMZ area, thus reducing the risks.
• Offers transparent segmentation and access control.  With the unique transparent access control module StoneGate IPS offers segmentation and firewall access control to existing networks without the need to change network configurations. The new module further extends traditional IPS inspection functionality by allowing company networks to be segmented in different security zones providing full access control for all Ethernet traffic.

---

ICSA Labs Certification

Stonesoft Stonegate IPS gained the industry recognised ICSA Lab Network IPS Certification in 2007.  The ICSA Labs Network IPS certification testing program is the culmination of 1-1/2 years of work. This complete and rigorous certification testing program combines:

• vulnerability-focused attack testing,
• evasion testing,
• denial-of-service testing,
• network performance/latency testing, and
• administrative function testing. 

The testing reflects ICSA Labs' understanding that results which ignore or short-change one or more of the above-listed aspects at best falls short of serving enterprise end users and at worst totally misleads them. The testing program was also developed understanding that these critical aspects had to be tested simultaneously - rather than in isolation - in order to properly mimic how Network IPS devices operate in a real, live network. 

Stonesoft IPS ICSA Lab Report

Your 30-day free trial includes

• A fully functional StoneGate product (only software)
• Access to product downloads    
• Free technical support
• No financial obligations 

OR we can supply an evaluation IPS appliance as shown below for 14 days with a qualified engineer to help with the setup for free

---

Meet your PCI Obligations

Requirement 11: Regularly test security systems and processes
Vulnerabilities are being discovered continually by hackers and researchers, and being introduced by new software. Systems, processes, and custom software should be tested frequently to ensure security is maintained over time and with any changes in software.

11.4 Use network intrusion detection systems, host-based intrusion detection systems, and intrusion prevention systems to monitor all network traffic and alert personnel to suspected compromises. Keep all intrusion detection and prevention engines up-to-date.

---

Stonegate IPS Models Available

IPS-6000

• IPS Throughput: 2 GB-Sec
• Total Number of Interfaces: 10
• of which bypass Interfaces: 8

IPS-2000

• IPS Throughput: 600 MB-Sec
• Total Number of Interfaces: 8
• of which bypass Interfaces: 4

IPS-400

• IPS Throughput: 100 MB-Sec
• Total Number of Interfaces: 4
• of which bypass Interfaces: 2

---

Stonegate IPS Datasheet