Stonesoft Corporation, an innovative provider of integrated
network security and business continuity solutions, introduces StoneGate™ IPS 4.0. for intrusion
prevention and detection. StoneGate IPS offers protection against denial of service (DoS) attacks,
intranet protection with Windows network protocol analysis and VoIP traffic security with Session
Initiation protocol (SIP) protocol inspection. StoneGate IPS forms the basis of layered defense for
enterprise customers.
“There are basically two different types of denial of service attacks; illegal input and
network traffic flood attacks, explains
Klaus Majewski, Product Marketing Manager at Stonesoft. “In
the first case, specially crafted packets cause the target service to crash, hang or reboot. The
second type are resource consumption attacks that try to either tie up all the resources of the
target machine or to fill the network bandwidth with traffic flood, so that legitimate users do not
have access to the target server anymore. StoneGate IPS protects servers against both kinds of
denial of service attacks and allows business flow without interruption.”
StoneGate IPS protects vulnerable applications and operating systems from network attacks.
IPS performs network traffic normalization, protocol analysis and deep inspection, thus identifying
and dropping malicious crafted packets. Network traffic flood attacks are prevented by identifying
legitimate traffic sources from spoofed ones and passing only valid client connections through.
StoneGate IPS provides efficient protection for intranet services and inspection for commonly
used Windows network protocols. When StoneGate IPS is used to segment internal networks to separate
security zones, attackers or worms cannot roam freely inside the company's internal networks even
if they had managed to breach the perimeter security. Stonesoft recommends organizations to have
more than just one layer of protection around their business data and network.
Voice over IP (VoIP) is becoming more and more viable mean to lower company's telephone
costs. StoneGate provides deep inspection for SIP protocol that is used in VoIP traffic. Protecting
the SIP communication prevents attackers from using the protocol as a way to breach into the
internal network.
StoneGate IPS 4.0 and later are capable of detecting and blocking attacks that use the new
evasion technique reported by CERT Coordination Center on 15 May 2007.
StoneGate™ secure connectivity solution comprises of a Firewall and an Intrusion Prevention
System (IPS). The StoneGate IPS, comprising of an IDS (Intrusion Detection System) and an IPS
(Intrusion Prevention System), defends the network proactively by detecting malicious packets
within regular network traffic and blocking them before any damage occurs. Implementing StoneGate
IPS expands the defence further within networks enabling comprehensive, multi-dimensional network
security. StoneGate Firewall and IPS work together to provide intelligent defence all over the
enterprise network.
StoneGate IPS 4.0 is currently available for shipping.
Tuesday, May 22, 2007