HUAWEI IPS Module

Huawei IPS module is a new generation of dedicated intrusion detection and prevention products. It is designed to resolve network security issues in the Web2.0 and cloud age. In the IPv4 and IPv6 network environment, the IPS module supports virtual patching, web application protection, client protection, malicious-software control, network application control, and network-layer and application-layer DoS attack defense.

With the carrier-class high availability design, the IPS module can be inserted on switches, such as the S12700, S9700, and S7700, providing plug and play and scalability features. It can be deployed flexibly in multiple network environments.

This module supports zero-configuration deployment and does not require complicated signature adjustment and manual setting of network parameters and threshold baselines to block service threats. Functioning with basic network devices, the IPS module comprehensively protects network infrastructures, network bandwidth performance, servers, and clients for large and medium-sized enterprise, industry, and carriers.

Product Features

• Uses software to adjust the networking, which simplifies the installation and deployment and frees the administrators from adjusting the complex cables
• Integrates networks with security using products from the same vendor, which facilitates unified management and simplifies the management.
• Supports zero-configuration deployment and plug and play, and does not require complicated signature adjustment and manual setting of network parameters.
• Provides diversified policy templates to simplify configurations in various scenarios and facilitate security policy customization.

• Detects attacks accurately without false positives with the advanced vulnerability feature detection technology.
• Automatically learns the traffic baselines to prevent incorrect threshold configurations.
• Automatically blocks major and severe threats without signature modification.

• Provides traditional intrusion protection system (IPS) functions, such as vulnerability-based attack defense, web application protection, malware control, application management and control, and network-layer DoS attack defense.
• Provides comprehensive protection for client systems exposed to the prevalent attacks that target web browsers, media files, and other document file formats.
• Provides industry-leading defense against application-layer DoS attacks that spread through HTTP, DNS, or SIP.
• Detects attacks and upgrades signatures in a timely manner with the global vulnerability trace capability.

• Identifies more than 6000 network applications. With precise bandwidth allocation policies, the IPS module restricts the bandwidth used by unauthorized applications and reserves sufficient bandwidths for office applications, such as OA and ERP.
• Monitors and manages various network behaviors, such as instant messaging (IM), online games, online video, and online stock trading. This enables enterprises to identify and prevent unauthorized network behaviors and better implement security policies.