Nowy moduł Cisco IPS NME-IPS-K9 intrusion prevention system do routerów Cisco ISR.

Do modeli Cisco 2811, 2821, 2851, 2911, 2921, 2951, 3800
Oraz 3900 Series Integrated Services Routers.

Feature Cisco IPS AIM and IPS NME
Heuristic detection Yes
Anomaly detection Yes
Sweeps or floods Yes
Denial-of-service (DoS) mitigation Yes
Worms or viruses Yes
Common gateway interface (CGI) or web attacks Yes
Buffer overflow protection Yes
Remote-procedure call (RPC) attack detection Yes
IP fragmentation attacks Yes
Internet Control Message Protocol (ICMP) attacks Yes
Simple Message Transfer Protocol (SMTP), Send Mail, Internet Message
Access Protocol (IMAP), or Post Office Protocol (POP) attacks
Yes
FTP, SSH, Telnet, and rlogin attacks Yes
Domain Name System (DNS) attacks Yes
TCP hijacks Yes
Windows or NetBIOS attacks Yes
TCP application protection Yes
Network Timing Protocol (NTP) attacks Yes
Customizable signatures using signature microengine technology Yes
Automated signature updates Yes
Alarm summarization Yes
Support for 802.1q traffic Yes
IP Security (IPsec) or Secure Sockets Layer (SSL) between sensor and
management console
Yes
Encrypted signature packages Yes
SSH for remote administration Yes
Serial Control Protocol (SCP) support for secure file transfer Yes
IP Fragmentation and Reassembly Yes
TCP Stream Reassembly Yes
Unicode Deobfuscation Yes
Router access-control-list (ACL) modifications Yes
Firewall policy modifications Yes
Switch ACL modifications Yes
Session termination with TCP resets Yes
IP session logging or session replay Yes
Alarm display Yes
Email alerts Yes
E-page alerts Yes
Customizable script execution Yes
Multiple alarm destinations Yes
Third-party tool integration Yes
IPS active update bulletins Yes
Web user interface (HTTPS) Yes
Command-line interface (CLI; console) Yes
CLI (Telnet or SSH) Yes
CiscoWorks VPN Security Management Solution support Yes