The Gateway Anti-Malware, Intrusion Prevention and Application Control service for the NSA 2650 delivers enterprise-grade defense at the network edge. It prevents spyware installation and disrupts covert communications, inspects traffic for application-layer threats, and gives administrators granular control over applications and bandwidth — all while preserving high throughput and low latency.
What it protects against
- Blocks spyware installation at the gateway and severs background communications used to exfiltrate data.
- Detects and blocks worms, Trojans, backdoors, buffer-overflow exploits, P2P/IM abuses, and other application-layer threats.
Core technologies
- High-performance deep packet inspection (DPI) engine that scans up through the application layer using parallel search algorithms for faster, more accurate detection.
- Per-packet scanning architecture that supports unlimited file sizes and hundreds of thousands of concurrent downloads for unmatched scalability.
Key benefits
- Ultimate scalability & performance: Multi-threaded DPI and per-packet scanning deliver exceptional throughput with minimal impact on firewall performance and memory.
- Advanced intrusion prevention: Comprehensive payload inspection and protocol analysis stop evasive, application-level attacks that traditional stateful firewalls miss.
- Application control: Monitor and control instant messaging and peer-to-peer use, apply policies to reduce backdoors, conserve bandwidth, and boost productivity.
- Simplified deployment & management: Create global policies across security zones, group and prioritize attacks, and manage protection centrally across distributed environments.
