To counter network security threats nowadays, with only a firewall and passive Intruder Detection System (IDS) is not enough. Firewall has limitation that it will not be able to detect attacks, which above layer 4, legitimate port attacks, spamming, anomaly attacks and worms attack. Passive IDS in other way could not stop attacks, which manage to succeed during the first transmission. TCP reset function in conventional IDS is not able to handle UDP base attack. It might be too late when passive IDS manage to trace the attacks activities.

Firewall fails to fulfil the network security requirements of the modern commercial network environment. BroadWeb's NetKeeper, Advance Intrusion Detection and Prevention Systems (AIDP), is the most recent innovation in the invasion detection arms race. It not only detects intrusion accurately but real-time blocks malicious packets before their entries. NetKeeper provides protection from Layer 4 to Layer 7 protection to corporate network.

Therefore, placing an Intruder Prevention System at critical network segment would be able to compliment such security weaknesses without sacrificing the network performance throughput. Another point to note is that it is important that such device will not add more point of failure to the network as hardware bypass are built in.

BroadWeb NetKeeper A+IDP provides multi state security protection on most attack firewall and passive IDS could not deliver.

• Anti-Intrusion
• Anti-DoS/DDoS
• Anti-Virus
• Anti-Spam
• Anti-P2P/Anti-Online Game
• Anti-Instant Messenger
• Anti-Porn
• Anti-Web Post

Functional Specifications

• Secure Networks with Multi-Detection Modes - NetKeeper protects network environments with Traffic Anomaly, Protocol Anomaly and Signature-based Pattern-matching Detection technologies.

• React to Attacks in Real-time - in addition to attack detections and alerts,NetKeeper intercepts attacks automatically and real-time drops illegal connections. NetKeeper also allows administrators to customize their policy rules to enhance the ffectiveness of the network protection.

• Log and Analyze All Intrusion Events Completely - once an attack is identified, NetKeeper logs detailed attack events and proceeds to intercept the packets based upon the pre-set security policies. These intrusion records allow the network administrators to trace both attack sources and targets IP addresses, connection ports and communication protocols.

• Clear and Easy-to-use User Interface and Reporting System - NetKeeper's web-based click and-select User Interfaces make managing tasks and report inquiries (i.e. TOP # intrusion events, attackers, and victims) easy. All reports can be printed out in the HTML format.

• Scalable for Unify Defense - the border between intranet and the Interne is not the only place to protect nowadays. The attacks may come from any segment of the network. The enterprise network should be scalable to augment the protection.

• Total Cost of Ownership - NetKeeper provides a total cost of ownership without additional cost to acquired work togethe product such as reporting tool or management console manager.

NetKeeper provides Inline Protection