Enterasys scales Dragon Intrusion Detection & Prevention

Enterasys Networks Inc, the Secure Networks Company, today announced a new Dragon Multi-Gigabit Intrusion Detection & Prevention System which joins the existing Gigabit and 10 Gigabit advanced security systems.

All of the Dragon appliances now support Enterasys distributed intrusion prevention capabilities to automatically sense and respond to threats in real-time across multi-vendor wired and wireless networks.

Dragon is unique in its ability to extend IDS/IPS to every LAN edge access port to detect threats, mitigate or stop any attack and, most importantly, automatically contain and/or remove the source of the threat from the network. The operational advantage is that Dragon delivers network security protections everywhere, not just somewhere.

"The network intrusion prevention system market continues to mature and evolve at a rapid pace as the network IPS market for stand-alone appliances continues to grow, from more than $700 million in 2006 to nearly $1 billion in 2007," said Greg Young, Research VP, Gartner.

"In 2006, there was a consistent average of $50 000 per gigabits per second (Gbps) of deep inspection. In 2007, there was considerable price variance. Enterprises should weight price as a factor in product selections." The new Dragon multi-gigabit appliances intelligently integrate with the Dragon Security Command Console (http://www.enterasys.com/products/advanced-security-apps/security-information-management/) for security information and event management (SIEM). When deployed in conjunction with the Enterasys Network Access Control (NAC) (http://www.enterasys.com/products/advanced-security-apps/enterasys-network-access.aspx) solution, unique IP-to-ID mapping capabilities immediately identify, locate, isolate and remove the source of malicious network traffic in real-time.

"Enterasys Dragon delivers fully distributed protection from both internal and external threats without having to deploy appliances on every wire," said Mike Fabiaschi, Enterasys President and CEO. "Rather than just telling you that a threat exists - we make it easy to immediately remove the threat from any multi-vendor network without impacting performance."

The Enterasys Dragon IDS/IPS system is the industry's only solution that simultaneously performs VOIP traffic analysis, vulnerability signature matching, protocol analysis, and network behavioural analysis with total packet capture and complete session reconstruction to protect against the widest variety of network-based and host-based threats. Dragon's multi-threaded architecture and virtual sensors optimise traffic analysis while scaling to meet the needs of the world's largest networks.

IT operations can avoid the performance bottleneck and scalability limitations of traditional in-line IPS appliances by deploying Enterasys Distributed IPS. Unlike traditional IPS solutions that cannot provide critical threat identification, location, containment, and removal capabilities, the Enterasys Distributed IPS solution removes the source of the attack's access to the network and reconfigures network devices from Cisco, Enterasys, Foundry, HP ProCurve, Juniper, Nortel and other vendors to prevent future access.