IBM Proventia Network Multi-Function Security (MFS) - MX3006

MX3006 Overview:

IBM Proventia Network Multi-Function Security (MFS) - MX3006 appliance is a unified threat management (UTM) device that provides protection at the gateway and network levels without jeopardizing network bandwidth or availability. It combats a variety of threats at once, such as unauthorized access, network attacks, malicious code, blended threats, content-based attacks, spyware and phishing.

Proventia Network MFS integrates these best-of-breed security modules in a single high performance and easy-to-use UTM appliance:

• Firewall/VPN
• Intrusion prevention
• Anti-virus
• Antispam
• Web/URL filter
• Application protection

Because running multiple security processes across multiple locations is costly and resource-intensive, the centralized, multi-layered approach offered by Proventia Network MFS is a welcome solution for small businesses as well as the distributed enterprise. You gain premium-class protection while maintaining system and network integrity, lowered costs by streamlining IT operations, plus a simplified security solution that helps mitigate the need for specialized in-house security resources.

No single solution is perfect
Single layered security such as a firewall or antivirus protection is no longer enough. Security threats have become more sophisticated in their approaches to attacking businesses. The severity of a security breaches can be disastrous, if not fatal, to an organization. Mediumsized businesses, as well as remote and branch offices, face the same types of Internet threats as enterprise-level networks. The IBM Proventia® Network Multi-Function Security (MFS) MX3006 and MX4006 appliances from IBM Internet Security Systems™ (ISS) provide comprehensive security designed to preemptively stop Internet threats before they penetrate the network and disrupt business operations.

Comprehensive security in a single device
The complexity of the modern security landscape requires businesses to adopt a multilayered approach to security. Proventia Network MFS unites these multiple security technologies into a single appliance. The Proventia Network MFS product family combines:

• Industry-leading Intrusion Prevention System (IPS)
• Stateful firewall
• Signature and behavioral antivirus
• Virtual Private Network (VPN) capabilities
• Content filtering
• Anti-spam

By joining these six security technologies, Proventia Network MFS provides all the security content needed to support enterprise-level networks in a single appliance at a compelling performance price. Proventia Network MFS MX3006 and MX4006 are ideal for moderate-sized business locations, branch offices and retail locations. Consolidating six security technologies into a single 1U appliance enables organizations to benefit from best-of-breed security without needing a host of in-house security experts to monitor and manage network performance. With an all-in-one security approach, and by requiring fewer information technology (IT) resources to manage network security, Proventia Network MFS provides preemptive, industrial-strength protection at a low total cost of ownership.

 

Flexible and scalable
From the moment organizations attach Proventia Network MFS to the network, the solution provides comprehensive security. For organizations with limited IT expertise, the default settings on Proventia Network MFS provide the security coverage needed to help protect the network from attack.

For businesses with IT expertise, Proventia Network MFS MX3006 and MX4006 can be customized to seamlessly integrate into even the most advanced network environments. Organizations can choose which security modules to utilize, create policies that allow/deny specific Internet traffic and build groups within the network to establish permissions to access certain information.

Proventia Network MFS can also help organizations with multiple sites manage the security posture for all locations from a single site. The security architecture can even be standardized through the use of such custom features such as Locally Resolved Variables. For organizations that have more than ten locations or need advanced reporting features and management capabilities, the IBM Proventia Management SiteProtector™ system can provide a complete set of central management features that help save time and reduce complexity.

Meeting compliance requirements
Business compliance and industry regulations can add a level of complexity to network security, as well as increase cost and drain IT resources in an often already strained department. Proventia Network MFS MX3006 and MX4006 are designed to protect organizations against security threats, safeguard critical data and achieve security requirements for regulations such as the Sarbanes-Oxley Act (SOX), the Health Insurance Portability and Accountability Act (HIPAA) and the Payment Card Industry (PCI) Data Security Standard (Proventia Network MFS helps to achieve 10 out of the 12 security standards defined by PCI Data Security Standard) – without increasing the budget or IT resources. In fact, the Proventia Network MFS family can help reduce IT resource requirements, allowing organizations to focus on revenue-generating activities.

 

Features & Benefits:

 

 

Unified Threat Management and Preemptive Protection with IBM Proventia Network MFS.

Making comprehensive, preemptive protection simple and affordable

IBM Proventia Network Multi-Function Security (Proventia Network MFS) from IBM Internet Security Systems (ISS) offers a range of strong, economical devices that stop Internet threats before they penetrate your network and disrupt your business.

The IBM Proventia product family offers preemptive protection for the IT infrastructure with appliances designed to stop network attacks, and security software that helps to protect servers and desktops from Internet threats. IBM ISS rounds out its product offerings with security consulting and managed services.

Proventia Network MFS combines industry-leading intrusion prevention technology from IBM ISS with firewall, anti-virus tools, Web filtering and anti-spam technology in a single appliance. It provides protection at the gateway and network levels without jeopardizing network bandwidth or availability, and combats a variety of threats at once—such as unauthorized access, network attacks, malicious code, blended threats, content-based attacks, spyware and phishing.

Why multi-function security?

Firewalls and anti-virus tools are not enough.
Blended threats and sophisticated hackers bypass and thwart these conventional defenses, disrupting your business.

Multiple stand-alone solutions are difficult and expensive to manage.
A stand-alone solution to cover every type of threat creates an expensive and ineffective approach when these defenses do not work in concert.

Why Proventia?

Best-of-breed security modules are truly integrated—not just bundled open source.
Each of the security layers—firewall/VPN, anti-virus protection, Web filtering, anti-spam and application protection—found in Proventia Network MFS are competitive as stand-alone products. These modules are carefully integrated into Proventia Network MFS to provide a high-performing, easy-to-configure and easy-to-use unified threat management appliance.

It includes preemptive protection—to stop threats before impact.
With intrusion prevention technology pioneered by IBM ISS, Proventia moves you beyond reactive protection to preemptive protection.

It’s driven by superior technology.
Proventia is powered by the IBM Internet Security Systems X-Force® research and development team—one of the world’s only security teams to combine vulnerability research with traditional attack research. The X-Force team’s expertise empowers Proventia Network MFS to promptly block over 1,000 types of attacks.

It is the foundation for the industry’s leading protection warranty.
When combined with IBM Managed Protection Services, this preemptive protection even comes with a protection “guarantee”*—the industry’s leading performance-based service level agreement (SLA) with a cash-back payment of US$50,000 for any security breach resulting from a successful attack listed on the IBM ISS X-Force Certified Attack List.

It provides among the best price/performance ratios on the market.
Proventia Network MFS provides a high level of protection from Internet threats at one of the best price/performance ratios available.

It’s a welcome solution for the distributed enterprise.
The appliance enables you to extend reliable preemptive protection to small businesses and remote offices where IT resources are minimal.

It delivers business continuity and a lower total cost of ownership.
You gain premium-class protection while maintaining system and network integrity, lowered costs by streamlining IT operations, plus a simplified security solution that helps mitigate the need for specialized in-house security resources.

Unifying one of the world’s best security technologies

Unified on a firewall/VPN platform, complete with anti-virus protection, Web filtering, anti-spam and application protection, Proventia Network MFS coalesces strong security solutions found in complex networks into a single small-form appliance “all-in-one” solution:

• IBM Proventia Intrusion Prevention—IBM ISS is one of the leaders in intrusion prevention. Proventia Network MFS offers you the caliber of protection once reserved for governments and Fortune 500 companies.
   
• IBM Virtual Patch® Technology—Virtual Patch technology allows you to regain control over ad hoc/emergency patching by shielding vulnerabilities at the network level.
   
• IBM Proventia Firewall—The firewall is ICSA-certified and provides the functionality needed in your enterprise environment, including allow/deny rules by address/port, named lists of objects and complete connectivity.
   
• IBM Proventia Signature Anti-Virus—With 100 percent coverage of the Wildlist,1 the gateway anti-virus solution analyzes files from Web sites and Web mail, download sites and e-mail—in real time. It offers security that stops viruses even if desktop protection is disabled/out of date.
   
• IBM Proventia Behavioral Anti-Virus—The IBM ISS patented** Virus Prevention System (VPS) detects and blocks bad files, including spyware, unknown viruses and unknown worms, without signature updates. Using a behavioral recognition system, VPS analyzes the activities of an executable file to detect whole families of malicious code. VPS has the ability to block more than 93 percent of malicious files without a virus signature update.
   
• IBM Proventia Web Filtering—With more than 70 million catalogued Web sites, the Proventia Web filter database is exponentially larger than most other databases. It is constantly updated to remain current, with 100,000 new/updated Web pages added daily.
   
• IBM Proventia Anti-Spam—This powerful technology incorporates ten methods of detection, is 95 percent effective in detecting spam with 1/10,000 false positives, and provides spam database updates every four hours—checking messages against a spam database and defined text categories, and comparing URLs in e-mail messages to the massive Web filter database.

 

Preemptive protection—tailored to your requirements
Proventia Network MFS appliances are rated for different numbers of users, with models for large enterprise deployments as well as small office/home office (SOHO) or remote office/branch office (ROBO) environments. Multiple appliances can be managed centrally by the IBM Proventia Management SiteProtector™ system.

• IBM Proventia Network MFS MX1004: for up to 100 users
• IBM Proventia Network MFS MX3006: for up to 500 users
• IBM Proventia Network MFS MX5010: for up to 2,500 users

 

Proventia Network Multi-Function Security Product Demo

 

Multi-Function Security Features:

Proventia Network MFS offers unified threat management protection (UTM) at the gateway to block known and unknown attacks. It is designed to provide superior, automated protection, flexible deployment and management, simplified security and a lower total cost of ownership than stand-alone security solutions.

Key Features:

• Unified Threat Management (UTM) Protection
  Proventia Network MFS unifies multiple security technologies on a single, powerful engine to provide advanced intrusion prevention, firewall, VPN, vulnerability assessment, behavioral and signature antivirus, antispam and Web filtering protection.
   
• Powerful Out-of-the-Box Security
  Proventia Network MFS uses ISS' unique vulnerability-based detection and prevention technologies to accurately block attacks, significantly reducing false positives. The default-blocking policy provides out-of-the-box protection against hybrid threats without requiring security expertise. More than 160 built-in rules and more than 2,500 checks are included.
   
• Virtual Patch Protection
  ISS' Virtual Patch technology allows you to regain control over ad-hoc and emergency patching by shielding vulnerabilities at the network level.
   
• Spyware Installation Blocking
  Proventia automatically blocks spyware applications at the network level, preventing installation and download to clients.
   
• Spyware Communication Blocking
  For clients already infected with spyware applications, Proventia prevents spyware intelligence reporting by automatically blocking active spyware application communication.
   
• High Performance
  Proventia Network MFS protects at wire speed without consuming network bandwidth or disrupting network availability, allowing legitimate traffic to pass unhindered.
   
• VoIP Protocol Protection
  Proventia Network MFS parses and analyzes the VoIP family of protocols to identify anomalous traffic. This unique type of analysis allows Proventia to identify and block known and unknown threats to your VoIP services, ensuring that your VoIP sessions have the best protection available.
   
• Reliable
  Proventia Network MFS UTM devices are rack-mounted appliances built on premium Intel equipment. They feature redundant internal cooling fans, power supplies and RAID (redundant) storage to prevent fatal hardware failures.
   
• Automatic Updates
  Proventia Network MFS is updated automatically via X-Press Update enhancements that deliver the most up-to-date protection against the latest vulnerabilities and threats, eliminating manual updates and downtime. X-Press Updates are compiled by ISS' world-renowned X-Force security intelligence team.
   
• Easy to Use
  Proventia Network MFS offers flexible configuration options for deployment, response and notification, as well as simple on/off capabilities for activating security content modules. Administrators can choose how they are notified of important security events.
   
• Built-in Security Intelligence
  Thanks to the built-in X-Force security intelligence, Proventia Network MFS provides easily accessible event details, including full descriptions with recommended actions and responses.
   
• Centralized Management System
  IBM Proventia Management SiteProtector allows you to control, monitor and analyze events with minimum staff and operational costs. SiteProtector scales easily for large global enterprises.
   
• World-Class Support
  ISS offers 24/7 global support and service for all components of Proventia Network MFS, including platform updates, technical support and Advanced Exchange replacement.
   
• Managed Protection Services Guarantee
  When managed by ISS, Proventia Network MFS provides guaranteed protection complete with a money-back warranty if a security breach occurs, the only offer of its kind in the world.

 

Technical Specifications:

** Free VPN client available using Microsoft Windows XP L2T VPN client or by purchasing a separate VPN client.
*** The Proventia Network MFS-W Series only contains only the DES Encryption Algorithm to meet Russian Federation encryption requirements. Proventia Network MFS MX-L Series of models are limited to a maximum VPN performance of 44 Mbps.
**** Capacity ratings based on nodes represent general guidelines about the size of the network that should be placed behind a particular Proventia Network Multi-function appliance model.

Proventia Network Multi-Function Security Comparison Matrix:

Uncompromising Protection for Every Layer of Your Network

Provides a comprehensive, all-in-one network security solution for even the most complex networks. Also helps organizations maintain government regulations and industry compliance requirements (helps address 10 out of 12 PCI requirements). Unified on an extensible platform, the Proventia MFS comes complete with robust firewall, IPsec or SSL VPN, antivirus, anit-spam web filtering and intrusion prevention security modules.

* See sizing guide for detailed information regarding # of concurrent users and active device modules
** Requires optional external bypass unit for fiber interfaces

Documentation:

Download the IBM Proventia Network Multi-Function Security (MFS) - MX3006 and MX4006 Datasheet (PDF).

Download the IBM Proventia Network Multi-Function Security Brochure (PDF).