Typically installed inline, IPS 5500 units can be deployed in a variety of modes, including detection-only, pre-emptive blocking or a combination of both. The Top Layer IPS detection/protection capabilities use integrated three-dimensional protection to perform thousands of inspections to filter out malicious traffic. The solution consists of three main modules: a stateful analysis firewall providing network-level protection, a denial-of-service protection engine and a deep packet inspection engine providing protection against vulnerabilities, worms and application-level attacks.
The IPS unit is managed through a Java-enabled web browser or through the IPS controller management software. The user interface is attractive with tree-based navigation of configuration and management items and a full graphical dashboard.
Enterprise features for redundancy, failover and scalability are all available. Reporting is granular and based on templates that allow admins to create type and frequency of reports. PCI compliance-level reporting is also available. Event logging configuration is very granular and gives one the flexibility to log as little or as much information as required for each sensor.
The documentation resources are very good, complete and nicely laid out, making deployment and management of the solution very easy.
The list price includes a three-year threat update subscription, three-year support, maintenance and upgrades, three-year advance hardware replacement, and two-day remote installation and deployment service. Additional support options are available for a fee.