security worm » software » linux server security » intrusion detection systems » packetalarm

PacketAlarm

Description

PacketAlarm unites intrusion detection and prevention, a multi-inspection firewall and a vulnerability scanner in one system. This provides companies with comprehensive protection against attacks which covers both the gateway and the internal network. Due to the central management all subsidiaries and field offices can also be protected comprehensively. PacketAlarm delivers maximum quality, performance and security at a minimum price. Which attacks should be blocked and which should only be logged can be configured individually per rule, or dynamically using the auto-prevention function. The auto-prevention function simplifies configuration and enables rules and rule groups to be quickly adapted to different security needs of the systems being protected. You can choose between different security levels based on your individual needs. In inline mode, the data stream to be monitored flows through PacketAlarm. To ensure maximum protection, PacketAlarm works with a two-tiered security concept. In the first tier, incoming data encounters the PacketAlarm firewall. Undesired communications are rejected. In the second tier, the PacketAlarm Intrusion Detection and Prevention System analyze the data that is allowed to pass through the firewall for hidden attacks. The detection module sends alarms about these attacks and the prevention module immediately blocks them. Safe data traffic flows on uninterrupted. In inline mode, PacketAlarm can be run as a bridge at layer 2 or as a router at layer 3. In sniffing mode, PacketAlarm listens to the network and scans all data that passes through. All attacks are logged and can trigger an alarm. If the Prevention System is activated, attacks are prevented using TCP reset or firewall hardening. In order to enable firewall hardening with systems from third-party manufacturers or systems developed in-house, a special interface definition, Open PacketAlarm Architecture (OPA), is used for communication.

Security Worm crawls the net for your wireless, server, networking, and internet software. ©2006 All rights reserved.