ISS INTERNET SECURITY SYSTEMS PROVENTIA G2000 NEW!!

This unit is brand new never used just out of box for picture. My shipping includes insurance! Feel free to make us an offer.

With the G2000, which reaches 2G bit/sec, ISS enters the high-speed IPS market to compete against vendors offering multi-gigabit IPS, including McAfee and 3Com's TippingPoint Technologies division. ISS also is upgrading its entire G line, which starts with the 100M bit/sec G100, to provide gateway-based blocking of roughly 7,000 types of spyware and adware, and a range of improved management features.

First off, ISS is adding the ability to exert policy-based protections based on IP address range or virtual LAN (VLAN ) segment.

"Previously, we only allowed policy by device, regardless of the number of ports, "It can now be by the device, number of ports and VLANs."

In addition, ISS is offering an optional Web-based management interface as an alternative to its SiteProtector management system for IPS deployments of up to five supported devices. The Web-based managed interface is far simpler than SiteProtector and will make it easy for smaller firms to deploy IPS, according to ISS.

ISS also is adding SNMP management support so that the G line can be integrated into third-party network management products. The G series ranges in price from $10,000 to $100,000.

All IPSs on the market are prone to issuing false alerts at some point when put into production. The kind of passive intrusion-detection sensors that have been used for years also generate false positives but don't block traffic. However, an IPS may instantly respond to a false positive by blocking legitimate traffic. This is one reason network managers often use IPS in what's called "mixed mode," configuring it to block some types of attacks but not others.   The Tolly Group, an independent testing organization, recently evaluated Internet Security Systems (ISS)' Proventia G2000 intrusion prevention appliance. The Tolly Group engineers ran a series of tests to measure how well Proventia repelled "malware" attacks without compromising normal network traffic. During the tests, The Tolly Group evaluated how well Proventia dealt with Denial of Service (DoS) attacks and simultaneous Nimda and Blaster attacks, as well as measuring "good" traffic flow. How did the Proventia G2000 score?

The Proventia G2000 passed all tests superbly, often performing well above its rated specifications. Here are some highlights of The Tolly Group's report*:

• Throughput - Measurement of how much data (in gigabits) can be transferred per second. Throughput rates ranged from 2.2 Gbps to 5 Gbps (depending on packet size). For larger packet sizes, the Proventia G2000 exceeded its rated maximum throughput by more than 100 percent.
• Latency - Measurement of how long a data packet takes to reach its destination. Tests revealed a minimum time of 19 microseconds, with an average latency time of 29 microseconds. In almost all cases up to and beyond the Proventia G2000's rated throughput, latency was rated extremely low.
• TCP Connections/Rate - The Proventia G2000 was able to set up and tear down more than 34,800 TCP connections per second. It exceeded rated concurrent connections and sustained about 1.99 million concurrent TCP connections.
• Fail-over Time - Engineers measured how long the Proventia G2000 took to enter and exit bypass mode to allow network traffic to continue uninterrupted. In nine different scenarios, fail-over time was excellent, ranging from zero to just over one second.
• SYN Flood Attack - The Proventia G2000 continued to support a 2 Gbps traffic rate even when blocking 1.48 million SYN Flood packets over a five minute duration. It proved its ability to mitigate SYN Flood attacks effectively at the maximum load.
• Nimda and Blaster Attacks - Even when simultaneous Nimda and Blaster attacks ramped up to 10,000 connections per second, the Proventia G2000 was able to maintain an average throughput of 1.3 Gbps while blocking 100 percent of the attacks.

The Tolly Group's report is conclusive: "… the [ISS] Proventia G2000 is able to maintain the flow of network traffic even while combating serious security threats, such as Gigabit-rate DoS attacks, Nimda and Blaster attacks."

To do business effectively today, organizations must have security solutions that block malware attacks without disrupting network performance. ISS' Proventia G2000 intrusion prevention appliance goes beyond firewall and antivirus protection to preemptively block the path to any vulnerability that may exist.  According to The Tolly Group, the Proventia G2000 performed up to or beyond its expectations in test after test.