DATA SHEET Intrusion Prevention System Distributed Intrusion Prevention & Response for Edge-to-Core and Data Center Benefits EXTENDS IPS PROTECTION TO THE NETWORK EDGE • Protect networked resources by removing an attacker’s ability to continue an attack or to mount a new attack • Real-time dynamic attacker containment limits security incident impact • Works with multi-vendor enterprise edge switching products PROTECTS TODAY’S AND TOMORROW’S NEXT GENERATION NETWORKS • Protection against emerging Voice over IP vulnerabilities, Day Zero threats, and advanced Denial of Service attacks • Delivers leading price point and proven effectiveness at Gigabit, Multi-Gigabit • Flexibly deployed as an appliance and/or virtual appliance enabling cost efficient threat detection and monitoring for both the physical and virtual networks • Supports inspection and reporting for IPv6 networks extending IPS/IDS capabilities into next generation networks INDUSTRY-LEADING INTRUSION PREVENTION AND RESPONSE • Unmatched threat detection and containment that leverages sophisticated signature, application, protocol, and behavioral analysis • Unique host-based and network-based protection deployment options LEVERAGES YOUR EXISTING INFRASTRUCTURE INVESTMENTS AND IT EXPERTISE • Ready to protect “out-of-the-box” with powerful configuration tools for customization and advanced control • No fork lift upgrades – works with your existing network switches, routers, wireless access points, and security appliances Threat containment that leverages existing network investments In-line Intrusion Prevention deployment to provide advanced security in a specific location Patented Distributed Intrusion Prevention deployment to automate response to threats in real-time Out-of-band Intrusion Detection deployment that simultaneously utilizes multiple response technologies Forensics tools for session reconstruction to simplify threat mitigation and resolution Product Overview The Extreme Networks Intrusion Prevention System (IPS) is unique in its ability to gather evidence of an attacker’s activity, remove the attacker’s access to the network, and reconfigure the network to resist the attacker’s penetration technique. The IPS stops attacks at the source of the threat and can proactively protect against future threats and vulnerabilities. Offering an extensive range of detection capabilities, host-based and network-based deployment options, a portfolio of IPS appliances, and seamless integration with the Extreme Networks Secure Networks™ architecture, our IPS utilizes a state-of-the-art high-performance, multi-threaded architecture with virtual sensor technology that scales to protect even the largest enterprise networks. The Intrusion Prevention System is a core component of the Extreme Networks Secure Networks architecture. When deployed in combination with Extreme Networks SIEM and NMS Automated Security Manager (ASM), it facilitates the automatic identification, location, isolation, and remediation of security threats. Extreme Networks IPS also integrates seamlessly with Extreme Networks Network Access Control (NAC) for post-connect monitoring of behavior once network access has been granted. Extreme Networks advanced in-line Intrusion Prevention is designed to block attackers, mitigate Denial of Service (DoS) attacks, prevent information theft, and ensure the security of Voice over IP (VoIP) communications - while remaining transparent to the network. Built upon our award-winning intrusion prevention technology, Extreme Networks IPS can alert on the attack, drop the offending packets, terminate the session for TCP and UDP-based attacks, and dynamically Intrusion Prevention System – Data Sheet

establish firewall or Secure Networks™ policy rules. Extreme Network Sensors are available at 1 Gbps and Multi-Gigabit deep Networks IPS leverages a comprehensive library of vulnerability packet inspection throughput rates. and exploit-based signatures. Extreme Networks’ Distributed Intrusion Prevention (US Patent HOST-BASED THREAT PREVENTION 7581249) and threat containment can block attackers at the Extreme Networks Host Sensors are security applications used source physical port for most multi-vendor edge switches. More to detect attacks on a network server in real time. Extreme granular business-oriented...

EMS configuration wizards and group policy rules simplify the configuration of network and host sensors. The EMS aggregates event reporting from individual network and host sensors. It can execute firewall rule changes, switch/router configurations, or other mitigation actions in response to attacks. AGENCY AND REGULATORY STANDARD SPECIFICATIONS Safety: UL 60950-1, CSA 22.1 60950, EN 60950-1, and IEC 60950-1, NOM EMC: FCC Part 15 (Class A), ICES-003 (Class A), BSMI, KCC, VCCI The EMS provides in-depth reporting and archiving of security V-3, AS/NZS CISPR 22 (Class A), EN 55022 (Class A), EN 55024,...

Ordering Information IDS NETWORK SENSOR SOFTWARE/VIRTUAL APPLIANCES PART NUMBER IPS NETWORK SENSOR APPLIANCES PART NUMBER Network IPS appliance, 1 Gbps limit Network IPS appliance - HW only for upgrades, 1 Gbps limit Network IDS software, 100 Mbps limit Network IPS appliance, 6 Gbps limit Network IDS software, 250 Mbps limit Network IDS software, 500 Mbps limit Network IPS appliance - HW only for upgrades, 6 Gbps limit Network IDS software, 1 Gbps limit Network IPS upgrade for existing MG Network IDS sensors HOST SENSOR SOFTWARE PART NUMBER NETWORK INTERFACE CARD (NIC) OPTIONS FOR GIG IPS APPLIANCES...

As a customer-centric company, Extreme Networks is committed Extreme Networks provides comprehensive service offerings that to providing quality products and solutions. In the event that range from Professional Services to design, deploy and optimize one of our products fails due to a defect, we have developed a customer networks, customized technical training, to service and comprehensive warranty that protects you and provides a simple support tailored to individual customer needs. Please contact way to get your products repaired or media replaced as soon your Extreme Networks account executive...