Radware Defensepro IPS Technical Specifications Datasheet

Radware DefensePro IPS: Specification Sheet
DefensePro IPS and Behavioral Protection
Technical Product Information
Product Models and Upgrade Options
DefensePro OnDemand Switch 3S2 Models
Designed for large data centers protection deployed by large
enterprises, eCommerce and service providers
Models:
DefensePro 8412 IPS & Behavioral Protection (up to
8Gbps)
DefensePro 4412 IPS & Behavioral Protection (up to
4Gbps)
Upgrade options (thru software license key):
DefensePro 4412 IPS & Behavioral Protection to
DefensePro 8412 IPS & Behavioral Protection
DefensePro OnDemand Switch 2S Models
Designed for medium sized data centers protection deployed by large enterprises, eCommerce and service providers
Models:
DefensePro 3016 IPS & Behavioral Protection (up to
3Gbps)
DefensePro 2016 IPS & Behavioral Protection (up to
2Gbps)
DefensePro 1016 IPS & Behavioral Protection (up to
1Gbps)
Upgrade options (thru software license key):
DefensePro 1016 IPS & Behavioral Protection to
DefensePro 2016 IPS & Behavioral Protection
DefensePro 2016 IPS & Behavioral Protection to
DefensePro 3016 IPS & Behavioral Protection
DefensePro X02 Series
Targeting Branch offices, Internet Gateway
Models:
DefensePro 502 (up to 500Mbps)
DefensePro 202 (up to 200Mbps)
DefensePro 102 (up to 100Mbps)
Upgrade options (thru software license key):
DefensePro 102 to DefensePro 202
DefensePro 202 to DefensePro 502
Page 1

Radware DefensePro IPS: Specification Sheet
Product Features
Feature
Protections
Network Wide Protections
Behavioral DoS Protect against known and zero-minute DoS/DDoS flood attacks that misuse network
bandwidth resources including: TCP Floods, UDP floods, ICMP floods, IGMP floods and
fragmented attacks.
Malware Propagation Prevent zero-minute malware spread by already infected hosts.
Prevention and Anti
Scanning
Prevents network pre-attack probes (Reconnaissance) including horizontal and vertical TCP
& UDP scanning, stealth scanning and ping sweeps.
RSA FraudAction
feeds
Real-time Anti-Trojan and Anti-Phishing service, targeted to fight against financial fraud,
information theft and malware spread. Based on real-time reputation feeds from RSA Anti
Fraud Command Center (AFCC).
Server Protections
SYN Protection Protect against any type of SYN flood attacks using advanced SYN Cookies mechanism.
Prevent SYN-ACK Reflection attacks.
HTTP Mitigator Protect against HTTP page flood attacks that misuse web server resources.
Server-Cracking
Protection
Connection Limit
Block brute force and dictionary attacks targeting to defeat server authentication schemes
including Mail servers (SMTP, POP3, IMAP), FTP servers, SIP servers, MS-SQL and
MYSQL servers.
Web sites application vulnerability scanning and hacking protection.
SIP Invite and Bye floods prevention.
Defend against connection based attacks such as half open SYN attacks, request attacks and
full session attacks.
Vulnerability-based protections
Signature Protections Protects against known application vulnerabilities and common malware including:
Web application protection, Mail servers protection, FTP servers protection, DNS
Vulnerabilities, SIP vulnerabilities, SNMP Vulnerabilities, Microsoft vulnerabilities, Worms
and Viruses, Backdoors and Trojans, Cross-Site Scripting, SQL Injections, Spyware, LAN
Protocol and Services Protection (RPC, NetBIOS, Telnet etc.), Generic Payloads (Remote
Execution, Shellcodes).
Security updates service (SUS) - weekly updates and emergency updates.
User-defined Attack Signatures.
Stateful Inspection RFC compliance and state machine verification for various protocols including TCP, ICMP,
DNS, HTTPS, SMTP, IMAP, POP3, FTP, SSH.
Stateful Operation TCP Stream Reassembly, IP Defragmentation.
SSL Attack Prevention Available for DefensePro series X16 and X412 in conjunction with AppXcel.
Bandwidth Management and Access Control
Bandwidth
Guarantee bandwidth per application (granular, per user or session basis).
Management
Limit bandwidth per application.
Limit P2P protocol traffic per session.
Access Control Access Lists per IP address & protocol; Black/White Lists per IP address per feature.
Supported protocols More than 100 protocols are supported including TCP, ICMP, DNS, HTTP, HTTPS, SMTP,
IMAP, POP3, FTP, Telnet, SSH, SIP, Skinny (SCCP), H.223, RTP, SNMP, MySQL, MS-SQL
(TDS) and LAN-centric protocols (RPC, NetBIOS) etc. Additional protocols can be defined by the
user.
Management
Alerting
SNMP V1, 2C &3, Log File, Syslog, E-mail.
Forensics
Attack Packet Logging, In-depth Attack Footprint Analysis, Attack Details and Statistics.
Configuration
SNMP V1, 2C, 3, HTTP, HTTPS, SSH, Telnet, Console (user selectable).
Time Synchronization NTP v2.0
Export Real-Time Northbound XML interface exporting behavioral parameters such as:
Signature information Normal traffic patterns.
Attacks real-time signatures of ongoing DoS/DDoS attacks and malware propagation and
anti scanning.
Page 2

Radware DefensePro IPS: Specification Sheet
Product Specifications
DefensePro
Model
Network
Location
Hardware
Platform
102 202 502 1016 IPS
&
Behavioral
Protection
Perimeter Perimeter Perimeter Core
MiniDP (SP-1)
2016 IPS
&
Behavioral
Protection
Core
3016 IPS
&
Behavioral
Protection
Core
Network Network Network
OnDemand Switch 2S1
Dual PS option is: OnDemand Switch
2S2
4412 IPS &
Behavioral
Protection
Core Network
8412 IPS &
Behavioral
Protection
Core Network
On Demand Switch 3S1
Performance 1
Capacity 2 100Mbps 200Mbps 500Mbps 1Gbps 2Gbps 4Gbps 4Gbps 10Gbps
Throughput 3 100Mbps 200Mbps 400Mbps 1Gbps 2Gbps 3.6Gbps 4Gbps 8Gbps
Max
Concurrent
Sessions
Maximum
DDoS Flood
Attack
Prevention
Rate
200,000 200,000 200,000 2,500,000 2,500,000 2,500,000 4,000,000 4,000,000
40,000
packets
per
second
40,000
packets
per
second
40,000
packets
per
second
1,000,000
packets
per
second
1,000,000
packets
per
second
1,000,000
packets
per
second
10,000,000
packets per
second
10,000,000
packets per
second
Latency < 120 micro seconds < 60 micro seconds < 60 micro seconds
Inspection
Ports
10/100/1000
Copper
Ethernet
2 2 2 12 12 12 8 8
GE (SFP) - - - 4 4 4 4 4
10GE (XFP) - - - - - - 4 4
Management
Ports
10/100/1000
Copper
Ethernet
1 1 1 2 2 2 2 2
RS-232 1 1 1 1 1 1 1 1
Mode of
Operation
Network
Operation
Deployment
Modes
Tunneling
protocols
support
IPv6
Policy Action
Block Actions
Transparent L2 Forwarding
In-line; SPAN Port Monitoring; and Copy Port Monitoring
VLAN Tagging, L2TP, MPLS, GRE, GTP
Support Ipv6 networks and block Ipv6 attacks
Block & Report, Report Only
Drop packet, reset (source, destination or both), suspend (source, source port, destination, destination port
1 Actual performance figures may change per network configuration, traffic type, etc.
2 Capacity is measured as maximum traffic forwarding when no security profiles are configured.
3 Throughput is measured with behavioral IPS protections and signature IPS protections using eCommerce
protection profile.
Page 3

Radware DefensePro IPS: Specification Sheet
High
Availability
Fail-open /
fail-close
Internal fail-open (no fail-close
option)
or any combination)
Internal fail-open/fail-close for copper
ports; internal fail-close for SFP
ports; optional for SFP ports 4
Internal fail-open/fail-close for
copper ports; internal fail-close
for SFP and XFP ports;
optional for SFP and XFP
ports 5
Dual Power No No No Optional Optional Optional Yes Yes
Supply
Advanced
internal
overload
mechanism 6 Yes Yes Yes Yes Yes Yes Yes Yes
Physical
Dimensions
(W x D x H)
mm
298x215x44
424x600x44 (1U)
Dual PS option: 424x600x88 (2U)
Weight (lb, kg) 4.785, 2.175 20.9, 9.5
Dual PS option is 24.0, 10.9
Power Supply Auto range: 100V-120V/200V- Auto range: 100V-120V/200V-240V
240V AC 50-60Hz
AC 50-60Hz or 38-72VDC
424x600x88
39.0, 18.0
Auto range: 100V-120V/200V-
240V AC 50-60Hz or 38-
72VDC
Power
20W 302W 426W
Consumption
Heat
68.2 1029 1452
Dissipation
(BTU/h)
Operating
0-40C
Temperature
Humidity
5% to 95%
(noncondensing)
Safety
UL, IEC #60950-1 EN, UL, CSA, IEC #60950-1
Certifications
EMC FCC part 15B class A EN 55022, EN 55024, FCC Part 15B Class A
Other
CE, FCC, VCCI, TUV, C-Tick,
CE, FCC, VCCI, CB, TUV, UL/cUL, CCC, C-Tick, RoHS
Certifications
GOST-R
Warranty
1-year hardware and software maintenance
Support
Certainty Support Program
Patent protected behavioral analysis technology
Radware DefensePro has been successfully awarded multiple United States patents based on real-time signatures, which
protect and secure applications and network traffic. DefensePro technology is protected by the following patents:
Patent No. 7,607,170 “Stateful Attack Protection”
Patent No. 7,617,170 “Generated Anomaly Pattern for HTTP Flood Protection”
Patent No. 7,624,084 “Method for Generating Anomaly Pattern for HTTP Flood Protection”
Patent No. 7,681,235 “Dynamic network protection”
Patent No. 11/869,067 “Automatic Signature Propagation Network”
Patent No. 11/835,503 “Method, system and computer program product for preventing sip attacks”
Specifications subject to change without notice.
4 External fiber fail-open switch with SFP ports is available at additional cost.
5 External fiber fail-open switches with SFP or XFP ports are available at additional cost.
6 Overload mechanism is designed to obtain maximum security coverage under extreme traffic loads.
Page 4