Intrusion Detection

An Intrusion Detection System (IDS) is a network security technology originally built for detecting vulnerability exploits against a target application or computer. Intrusion Prevention Systems (IPS) extended IDS solutions by adding the ability to block threats in addition to detecting them and has become the dominant deployment option for IDS/IPS technologies.

Large enterprises will continue to put an intrusion prevention system in-line behind a firewall, but budget conscious organizations with fewer IT staff members are looking at next-generation firewall appliances that promise both the packet inspection of an appliance, application control and other features in a next-generation firewall.

At Afrimax, we offer both options. Our solutions are customized to reach the diverse needs of the clients. We deal with vendors such as Stonesoft, Check point,  and Dell SonicWall.

Stonesoft (recently acquired by McAfee), have virtual file analysis engines to detect custom malware used in advanced threats.

Check Point claims its 13500 next-generation firewall appliance gets up to 23.61 Gbps of firewall throughput and 5.71 Gbps of IPS. It was rated very highly in NSS Labs' recent testing, earning a 94.4 percent security effectiveness rating. NSS Labs engineers calculated the total cost of ownership at $23.55 per protected Mbps.

Industry analysts say Dell is hoping its SonicWall SuperMassive next-generation firewall appliance line will move it up into the enterprise space. Dell says its system provides more than 10 Gbps of full deep packet inspection throughput. The appliance received a "Recommended" rating from NSS Labs, which after testing it gave the appliance a security effectiveness score of 94.8 percent. The appliance got an above average value rating, with a total cost of ownership at $15.02 per protected Mbps.