This four-year service delivers enterprise-grade gateway protection for the NSA 2650, combining anti-malware, intrusion prevention and application control to defend networks from modern, application-layer threats while preserving high throughput and operational simplicity.
Overview
The service blocks spyware installation at the gateway and severs covert communications used for data exfiltration. It inspects packet payloads to detect and stop worms, Trojans, buffer-overflow exploits, backdoors, P2P/IM abuses and other malicious code that traditional firewalls often miss.
Key technologies
- Integrated Deep Packet Inspection (DPI): A high-performance DPI engine inspects traffic up through the application layer using parallel search algorithms for fast, accurate detection with minimal performance impact.
- Per-packet scanning architecture: Supports unlimited file sizes and hundreds of thousands of concurrent downloads, delivering exceptional scalability and consistent throughput under heavy load.
Capabilities & benefits
- Powerful intrusion prevention: Detects evasive, application-level attacks and stops exploitation attempts before they reach internal systems.
- Comprehensive anti-malware & spyware defense: Prevents new infections and disrupts ongoing spyware communications to protect sensitive data.
- Application control & bandwidth management: Monitor and enforce policies for instant messaging, peer-to-peer, and other apps to close backdoors, conserve bandwidth, and improve productivity.
- Simplified deployment & management: Centralized policy creation across security zones, attack grouping/prioritization, and intuitive management reduce rollout time and administrative overhead.
