MPED-X-Routing-Tender20080721 - Madhya Pradesh State Excise

• Accurately identifies attacks with correct severity level while allowing benign
traffic to pass without interruption.
• Accurately respond to intrusion attempts
Detection & Prevention Technology:
• Detects and blocks all known, high-risk exploits.
• Employs full seven-layer protocol analysis of over 150 Internet protocols and
data file format. Provide list of network and application layer protocols decoded.
• Operates effectively and protects against high risk, high impact malicious traffic
via default out of box configuration, should be able to block more than 1000
attacks by default.
• Performs stateful packet inspection
• Detects and blocks malicious web traffic on any port.
• Does TCP stream reassembly.
• Does IP defragmentation.
• Protocol anamoly detection
• Does Bi- directional inspection
• Detects attacks within protocols independent of port used
• Does Heuristics
• Does RFC Compliance
• Does Protocol tunneling
• Supports attack recognition inside IPv6 encapsulated packets
• Supports active blocking of traffic based on pre-defined rules to thwart attacks
before any damage is done, i.e. before compromise occurs.
• Supports active blocking of traffic based on dynamic responses to pre-defined
rules.
• Supports several prevention techniques including drop-packet, tcp-rst, etc.
Response Mechanisms:
• Offers a variety of built-in responses including console alerts, database logging,
email notifications, SNMP traps, offending packet captures, and packet captures.
Management Console:
• Management Console Software should be able to manage 10 Network
Appliances. Hardware specifications to be provided for the Management
Console.
• Allows central management of signature updates. Is able to centrally push out
updates from one location to multiple heterogeneous networks, server agents.
• Centralized Management Console should manage all the products NIPS, HIPS,
End Point Security and Vulnerability Assessment.
• Support for built in ticketing system.
• Granular Management. Allows policy to be assigned
• Policy per device
• Policy per port
• Policy per VLAN tag
• Policy per IP address/range
• Provide automated notification of IPS communications failure
• Integration capability with Arcsight, Tivoli, HPOV
70