New Intrusion Detection and Prevention Technology from Network Box

Published 30th June 2009

A new, integrated intrusion detection and prevention system from managed security firm, Network Box, combines existing approaches to security into a single unified platform, for the first time in the security industry. Network Box’s Intrusion Detection and Prevention System (IDPS) system combines passive and active detection with intrusion prevention, to create a single protection model with great performance. The IDPS system can be configured to specific requirements of individual customers (and to meet the requirements of separate groups within those customers) by configuring individual Network Box devices.

This is the second significant security innovation from Network Box this year.

The new IDPS system separates protection into configurable layers that are responsible for implementing protection such as DDoS protection, protocol analysis, stream pattern recognition and much more. As part of this defence, the new NBIDPS system uses the open-source Snort engine extensively modified to fit into the Network Box security, logging and management framework. This allows us to use industry-standard format signatures and heuristics. It also provides a powerful rules language as well as more stream and protocol decoders. Network Box currently has over 10,000 Intrusion Detection and Prevention signatures. All these features integrate with each other and with Network Box’s security model, to create a powerful single security platform.

To provide visibility the logs are incorporated into the Global Monitoring System which can be accessed via the customer portal, Box Office, as well as being included in the system’s periodic reporting and administrative interface.

Simon Heron, Internet Security Analyst for Network Box, says: “Intrusion detection and prevention are a very important part of any organisation’s defences, but are frequently ignored. If you integrate technologies, they work better together. And if you configure them to an organisation’s requirements, they work better for the business. We’ve spent considerable time developing a system that works within a unified threat management system to give the best security at no additional cost to customers. This is the result.”