Server Protection Features
Multiple technologies deliver server protection that prevents attackers from exploiting vulnerabilities in operating systems and applications.
Advanced Intrusion Prevention/Blocking
Proventia Server IPS monitors all traffic to and from servers and networks to prevent attacks. It blocks attacks such as buffer overflows, Trojans, brute force attacks, worms and unauthorised access attempts.
Virtual Patch Protection
Allows customers to protect their servers before an attack is 'in the wild,' avoiding emergency patch rollouts.
Buffer Overflow Exploitation Prevention (BOEP)
BOEP is a preemptive, signature-less technology that effectively blocks malicious code exploits in memory buffer overflows. It stops worms from propagating and prevents attackers from using buffer overflows to run arbitrary code on your server systems.
Firewall
Reduces the server's exposure to illegitimate traffic through IP, port and protocol rules for inbound and outbound server traffic
AV-Compliance
Verifies that traditional signature-based anti-virus software applications are running and have the latest signature files (for Windows).
Web Application Protection
Protects Web applications by inspecting traffic for malicious activity and is capable of adding an additional level of protection to those applications running on Apache by inspecting Secure Sockets Layer (SSL) encrypted traffic (for Linux).
Support for HTTPS Traffic
Supports inspection of HTTPS traffic streams for Apache 2.0.x (for Linux).
Service and Application Policy Enforcement
Ensures that only authorised services and applications are running on servers. It also prevents unauthorised programs from being installed (for Windows).
Network Access Policy Enforcement
Makes sure that only authorised applications are accessing your network. It sets port and IP restrictions for inbound and outbound server traffic (for Windows).
Backed by ISS' X-Force
ISS' X-Force is the most respected Internet security research group in the industry, having researched and identified security issues present in a wide range of products. This cutting-edge security research and development team actively turns research into product improvements, ultimately delivering ahead of the threat protection to ISS customers.
Management Features
Manage Proventia Server IPS agents with IBM Proventia Management SiteProtector for enterprise-wide, centralised server protection.
Centralised Management System
Control, monitor and analyse your all of your security protection systems from one console with a minimum of staff and low operational costs. SiteProtector is an integrated system that enables monitoring of intrusion activity, vulnerability assessment, event prioritisation and correlation of ongoing security activities. It also delivers multi-site management capabilities. No other security management solution provides the real-time, end-to-end visibility into enterprise-wide security programs that SiteProtector does.
Scalability
Proventia Server Intrusion Protection System can scale to manage up to 25,000 servers in a single instance of SiteProtector.
Advanced Event Correlation and Analysis
The IBM SiteProtector SecurityFusion module delivers built-in ISS X-Force security intelligence to dynamically escalate threatening security incidents and reduce false alarms. The module instantly correlates security data from multiple sources to escalate serious threats, such as an attack on a vulnerable asset or a covert, multi-step attack.
Automatic Updates
Security content updates to Proventia Server IPS are delivered in the form of X-Press Updates and are applied through the SiteProtector console. X-Press Updates help to minimise both manual updates and server downtime to keep your systems up and running. X-Press Updates are developed by ISS' X-Force, the most respected security research and development group in the industry.
Global Technical Support
ISS offers a variety of maintenance and support packages to ensure that your ISS security systems meet the needs and service demands of your business environment. ISS support packages are available globally.
Please refer to data sheets.