IntruVert Unveils High-Speed Intrusion Detection Line

IntruVert Networks this week formally introduced its IntruShield product line, including two high-speed intrusion detection appliances that employ a combination of signature, anomaly and denial of service (DoS) detection techniques.

The company previously disclosed plans for its new IDSs, but this week detailed product specifications, availability and pricing. The firm also introduced a pair of management systems for the IntruShield line.

IntruShield devices are more cost-effective than competing products because they can monitor traffic to and from a large number of servers, says Raj Dhingra, vice president of marketing for IntruVert, based in San Jose, Calif.

The IntruShield 4000 (I-4000) comes with four Gigabit Ethernet interfaces, enabling it to handle up to 2G bps of traffic in full duplex mode, Dhingra says. The IntruShield 2600 (I-2600) has six Fast Ethernet and two Gigabit Ethernet ports, with maximum throughput of 600M bps. It also has three response ports, to send packets that dictate what action to take in response to an attack.

The I-4000 is priced at $100,000 while the I-2600 costs $35,000. Dhingra says the products can help reduce overall capital expenses because they combine functions -- signature, application and protocol anomaly, and DoS detection -- that are normally found in separate products.

Additionally, a single appliance can be used to monitor traffic destined for multiple servers, whereas many IDSs require a separate box for each server.

That last feature is in part a function of the IntruShield Security Management (ISM) systems that were also announced this week. The company announced two versions of the ISM: the IntruShield Global Manager can support deployments with several hundred IntruShield sensors while the IntruShield Manager supports up to three sensors.

Each version enables users to define granular policies according to virtual LANs that may define a department, or even down to a particular IP address or address range. Users can set up administrative domains, such that sensors with common policies are in the same domain. The systems also support role-based access, so administrators can be given varying levels of authorization.

The IntruShield system has been in beta test at eight organizations since early April.