IBM Proventia Network Multi-Function Security (MFS) - MX5110

MX5110 Overview:

IBM Proventia Network Multi-Function Security (MFS) - MX5110 appliance is a unified threat management (UTM) device that provides protection at the gateway and network levels without jeopardizing network bandwidth or availability. It combats a variety of threats at once, such as unauthorized access, network attacks, malicious code, blended threats, content-based attacks, spyware and phishing.

Proventia Network MFS integrates these best-of-breed security modules in a single high performance and easy-to-use UTM appliance:

• Firewall/VPN
• Intrusion prevention
• Anti-virus
• Antispam
• Web/URL filter
• Application protection

Because running multiple security processes across multiple locations is costly and resource-intensive, the centralized, multi-layered approach offered by Proventia Network MFS is a welcome solution for small businesses as well as the distributed enterprise. You gain premium-class protection while maintaining system and network integrity, lowered costs by streamlining IT operations, plus a simplified security solution that helps mitigate the need for specialized in-house security resources.

Network security threats are more than skin deep

Single layered security such as a firewall or antivirus protection is no longer enough. Security threats have become more sophisticated in their approaches to attacking businesses. Organizations must deploy multiple security strategies to combat the network threats that reside both internally and externally. The severity of a security breach can be disastrous, if not fatal, to an organization. Large businesses, as well as remote and branch offices, face the same types of Internet threats that the largest enterprise-level networks face. The IBM Proventia® Network Multi-Function Security (MFS) MX5008 and MX5110 appliances from IBM Internet Security Systems™ (ISS) provide comprehensive multilayered security designed to preemptively stop Internet threats before they penetrate the network and disrupt business operations.

Comprehensive security in a single device

The complexity of the modern security landscape requires businesses to adopt multiple security strategies (a multilayered approach) to their network infrastructure. With Proventia Network MFS, IBM ISS unites these multiple security technologies into a single appliance.

Proventia Network MFS combines:

• Industry-leading Intrusion Prevention System (IPS)
• Stateful firewall
• Signature and behavioral antivirus
• Virtual Private Network (VPN) capabilities
• Content filtering
• Anti-spam

By joining these six security technologies, Proventia Network MFS provides all the security content needed to support enterprise-level networks on a single appliance at a compelling performance price. Proventia Network MFS MX5008 and MX5110 are ideal for larger businesses, branch offices and retail locations. By consolidating six security technologies into a single 2U appliance, organizations benefit from best-ofbreed security without requiring a host of in-house security experts to monitor and manage network performance. With an all-in-one security approach and by requiring fewer information technology (IT) resources to manage network security, Proventia Network MFS provides preemptive, industrialstrength protection at a low total cost of ownership.

Flexible and scalable

From the moment organizations attach Proventia Network MFS to the network, the solution provides comprehensive security. For organizations with limited IT expertise, the default settings on Proventia Network MFS provide the coverage needed to help secure the network from attack.

For businesses with IT expertise, Proventia Network MFS MX5008 and MX5110 can be customized to seamlessly integrate into even the most advanced network environments. Organizations can even choose which security modules to utilize, create policies that allow/deny specific Internet traffic, and build groups within the network to establish permissions to access information.

Proventia Network MFS can also help businesses with multiple sites manage their security posture for all locations from a single site. The security architecture can even be standardized with Proventia Network MFS by utilizing custom features such as Locally Resolved Variables.

For organizations that need advanced reporting features and/or to deploy Proventia Network MFS to multiple sites, IBM Proventia Management SiteProtector™ system can provide a complete set of central management features that help save time and reduce complexity. The SiteProtector system allows management of not just the Proventia Network MFS, but also any other IBM Proventia product family offering – from a single central management interface.

Meeting compliance requirements

Business compliance and industry regulations can add a level of complexity to network security, as well as increase cost and drain IT resources in an often times already strained department. Proventia Network MFS MX5008 and MX5110 are designed to protect organizations against security threats, safeguard critical data and help meet security requirements for regulations such as the Sarbanes- Oxley Act (SOX), the Health Insurance Portability and Accountability Act (HIPAA) and the Payment Card Industry (PCI) Data Security Standard (Proventia Network MFS helps to achieve 10 out of the 12 security standards defined by the PCI Data Security Standard) – without increasing the budget or draining IT resources. In fact, Proventia Network MFS can help reduce IT resource requirements, allowing organizations to instead focus on revenue-generating activities.

Features & Benefits:

Unified Threat Management and Preemptive Protection with IBM Proventia Network MFS.

Making comprehensive, preemptive protection simple and affordable

IBM Proventia Network Multi-Function Security (Proventia Network MFS) from IBM Internet Security Systems (ISS) offers a range of strong, economical devices that stop Internet threats before they penetrate your network and disrupt your business.

The IBM Proventia product family offers preemptive protection for the IT infrastructure with appliances designed to stop network attacks, and security software that helps to protect servers and desktops from Internet threats. IBM ISS rounds out its product offerings with security consulting and managed services.

Proventia Network MFS combines industry-leading intrusion prevention technology from IBM ISS with firewall, anti-virus tools, Web filtering and anti-spam technology in a single appliance. It provides protection at the gateway and network levels without jeopardizing network bandwidth or availability, and combats a variety of threats at once—such as unauthorized access, network attacks, malicious code, blended threats, content-based attacks, spyware and phishing.

Why multi-function security?

• Firewalls and anti-virus tools are not enough.
  Blended threats and sophisticated hackers bypass and thwart these conventional defenses, disrupting your business.
• Multiple stand-alone solutions are difficult and expensive to manage.
  A stand-alone solution to cover every type of threat creates an expensive and ineffective approach when these defenses do not work in concert.

Why Proventia?

• Best-of-breed security modules are truly integrated—not just bundled open source.
  Each of the security layers—firewall/VPN, anti-virus protection, Web filtering, anti-spam and application protection—found in Proventia Network MFS are competitive as stand-alone products. These modules are carefully integrated into Proventia Network MFS to provide a high-performing, easy-to-configure and easy-to-use unified threat management appliance.
• It includes preemptive protection—to stop threats before impact.
  With intrusion prevention technology pioneered by IBM ISS, Proventia moves you beyond reactive protection to preemptive protection.
• It’s driven by superior technology.
  Proventia is powered by the IBM Internet Security Systems X-Force® research and development team—one of the world’s only security teams to combine vulnerability research with traditional attack research. The X-Force team’s expertise empowers Proventia Network MFS to promptly block over 1,000 types of attacks.
• It is the foundation for the industry’s leading protection warranty.
  When combined with IBM Managed Protection Services, this preemptive protection even comes with a protection “guarantee”*—the industry’s leading performance-based service level agreement (SLA) with a cash-back payment of US$50,000 for any security breach resulting from a successful attack listed on the IBM ISS X-Force Certified Attack List.
• It provides among the best price/performance ratios on the market.
  Proventia Network MFS provides a high level of protection from Internet threats at one of the best price/performance ratios available.
• It’s a welcome solution for the distributed enterprise.
  The appliance enables you to extend reliable preemptive protection to small businesses and remote offices where IT resources are minimal.
• It delivers business continuity and a lower total cost of ownership.
  You gain premium-class protection while maintaining system and network integrity, lowered costs by streamlining IT operations, plus a simplified security solution that helps mitigate the need for specialized in-house security resources.

Unifying one of the world’s best security technologies

Unified on a firewall/VPN platform, complete with anti-virus protection, Web filtering, anti-spam and application protection, Proventia Network MFS coalesces strong security solutions found in complex networks into a single small-form appliance “all-in-one” solution:

• IBM Proventia Intrusion Prevention—IBM ISS is one of the leaders in intrusion prevention. Proventia Network MFS offers you the caliber of protection once reserved for governments and Fortune 500 companies.
• IBM Virtual Patch® Technology—Virtual Patch technology allows you to regain control over ad hoc/emergency patching by shielding vulnerabilities at the network level.
• IBM Proventia Firewall—The firewall is ICSA-certified and provides the functionality needed in your enterprise environment, including allow/deny rules by address/port, named lists of objects and complete connectivity.
• IBM Proventia Signature Anti-Virus—With 100 percent coverage of the Wildlist,1 the gateway anti-virus solution analyzes files from Web sites and Web mail, download sites and e-mail—in real time. It offers security that stops viruses even if desktop protection is disabled/out of date.
• IBM Proventia Behavioral Anti-Virus—The IBM ISS patented** Virus Prevention System (VPS) detects and blocks bad files, including spyware, unknown viruses and unknown worms, without signature updates. Using a behavioral recognition system, VPS analyzes the activities of an executable file to detect whole families of malicious code. VPS has the ability to block more than 93 percent of malicious files without a virus signature update.
• IBM Proventia Web Filtering—With more than 70 million catalogued Web sites, the Proventia Web filter database is exponentially larger than most other databases. It is constantly updated to remain current, with 100,000 new/updated Web pages added daily.
• IBM Proventia Anti-Spam—This powerful technology incorporates ten methods of detection, is 95 percent effective in detecting spam with 1/10,000 false positives, and provides spam database updates every four hours—checking messages against a spam database and defined text categories, and comparing URLs in e-mail messages to the massive Web filter database.

Preemptive protection—tailored to your requirements
Proventia Network MFS appliances are rated for different numbers of users, with models for large enterprise deployments as well as small office/home office (SOHO) or remote office/branch office (ROBO) environments. Multiple appliances can be managed centrally by the IBM Proventia Management SiteProtector™ system.

• IBM Proventia Network MFS MX1004: for up to 100 users
• IBM Proventia Network MFS MX3006: for up to 500 users
• IBM Proventia Network MFS MX5010: for up to 2,500 users

Proventia Network Multi-Function Security Product Demo

Multi-Function Security Features:

Proventia Network MFS offers unified threat management protection (UTM) at the gateway to block known and unknown attacks. It is designed to provide superior, automated protection, flexible deployment and management, simplified security and a lower total cost of ownership than stand-alone security solutions.

Key Features:

• Unified Threat Management (UTM) Protection
  Proventia Network MFS unifies multiple security technologies on a single, powerful engine to provide advanced intrusion prevention, firewall, VPN, vulnerability assessment, behavioral and signature antivirus, antispam and Web filtering protection.
• Powerful Out-of-the-Box Security
  Proventia Network MFS uses ISS' unique vulnerability-based detection and prevention technologies to accurately block attacks, significantly reducing false positives. The default-blocking policy provides out-of-the-box protection against hybrid threats without requiring security expertise. More than 160 built-in rules and more than 2,500 checks are included.
• Virtual Patch Protection
  ISS' Virtual Patch technology allows you to regain control over ad-hoc and emergency patching by shielding vulnerabilities at the network level.
• Spyware Installation Blocking
  Proventia automatically blocks spyware applications at the network level, preventing installation and download to clients.
• Spyware Communication Blocking
  For clients already infected with spyware applications, Proventia prevents spyware intelligence reporting by automatically blocking active spyware application communication.
• High Performance
  Proventia Network MFS protects at wire speed without consuming network bandwidth or disrupting network availability, allowing legitimate traffic to pass unhindered.
• VoIP Protocol Protection
  Proventia Network MFS parses and analyzes the VoIP family of protocols to identify anomalous traffic. This unique type of analysis allows Proventia to identify and block known and unknown threats to your VoIP services, ensuring that your VoIP sessions have the best protection available.
• Reliable
  Proventia Network MFS UTM devices are rack-mounted appliances built on premium Intel equipment. They feature redundant internal cooling fans, power supplies and RAID (redundant) storage to prevent fatal hardware failures.
• Automatic Updates
  Proventia Network MFS is updated automatically via X-Press Update enhancements that deliver the most up-to-date protection against the latest vulnerabilities and threats, eliminating manual updates and downtime. X-Press Updates are compiled by ISS' world-renowned X-Force security intelligence team.
• Easy to Use
  Proventia Network MFS offers flexible configuration options for deployment, response and notification, as well as simple on/off capabilities for activating security content modules. Administrators can choose how they are notified of important security events.
• Built-in Security Intelligence
  Thanks to the built-in X-Force security intelligence, Proventia Network MFS provides easily accessible event details, including full descriptions with recommended actions and responses.
• Centralized Management System
  IBM Proventia Management SiteProtector allows you to control, monitor and analyze events with minimum staff and operational costs. SiteProtector scales easily for large global enterprises.
• World-Class Support
  ISS offers 24/7 global support and service for all components of Proventia Network MFS, including platform updates, technical support and Advanced Exchange replacement.
• Managed Protection Services Guarantee
  When managed by ISS, Proventia Network MFS provides guaranteed protection complete with a money-back warranty if a security breach occurs, the only offer of its kind in the world.

Technical Specifications:

** Free VPN client available using Microsoft Windows XP L2T VPN client or by purchasing a separate VPN client.
*** The Proventia Network MFS-W Series only contains only the DES Encryption Algorithm to meet Russian Federation encryption requirements. Proventia Network MFS MX-L Series of models are limited to a maximum VPN performance of 44 Mbps.
**** Capacity ratings based on nodes represent general guidelines about the size of the network that should be placed behind a particular Proventia Network Multi-function appliance model.

Proventia Network Multi-Function Security Comparison Matrix:

Uncompromising Protection for Every Layer of Your Network

Provides a comprehensive, all-in-one network security solution for even the most complex networks. Also helps organizations maintain government regulations and industry compliance requirements (helps address 10 out of 12 PCI requirements). Unified on an extensible platform, the Proventia MFS comes complete with robust firewall, IPsec or SSL VPN, antivirus, anit-spam web filtering and intrusion prevention security modules.

Proventia Network Multi-Function Security
Model:	Mid-Market / Remote Office				Large Gateway
	MX0804	MX1004	MX3006	MX4006	MX5008	MX5110
Maximum Recommended Nodes/Users	50*	100*	500*	1,000*	2,000*	3,000*
Security Content Updates	Powered by X-Force; Antivirus by Sophos	Powered by X-Force; Antivirus by Sophos	Powered by X-Force; Antivirus by Sophos	Powered by X-Force; Antivirus by Sophos	Powered by X-Force; Antivirus by Sophos	Powered by X-Force; Antivirus by Sophos
Form Factor	Desktop Appliance	Desktop Appliance	1U Appliance	1U Appliance	2U Appliance	2U Appliance
Capabilities Summary
Intrusion Prevention	Yes	Yes	Yes	Yes	Yes	Yes
Intrusion Detection	Yes	Yes	Yes	Yes	Yes	Yes
Antivirus (behavior-based)	Yes (from Sophos)	Yes (from Sophos)	Yes (from Sophos)	Yes (from Sophos)	Yes (from Sophos)	Yes (from Sophos)
Antivirus (signature-based)	Yes (from Sophos)	Yes (from Sophos)	Yes (from Sophos)	Yes (from Sophos)	Yes (from Sophos)	Yes (from Sophos)
Content Filtering	Yes	Yes	Yes	Yes	Yes	Yes
Protected segments	Yes	Yes	Yes	Yes	Yes	Yes
Web Application/ Database Protection	Yes	Yes	Yes	Yes	Yes	Yes
VoIP Security	Yes	Yes	Yes	Yes	Yes	Yes
Spyware Prevention	Yes	Yes	Yes	Yes	Yes	Yes
VPN	IPsec and SSL	IPsec and SSL	IPsec and SSL	IPsec and SSL	IPsec and SSL	IPsec and SSL
Hardware-Related Specifications
Monitoring or scanning interfaces	4 x 10/100/1000 Copper	4 x 10/100/1000 Copper	6 x 10/100/1000 Copper	6 x 10/100/1000 Copper	8 x 10/100/1000 Copper	10 x 10/100/1000 Copper
Inline protected segments	4	4	6	6	8	10
Throughput available	100 Mbps**	100 Mbps**	200 Mbps**	600 Mbps**	1600 Mbps**	1800 Mbps**
Concurrent sessions (rated maximum)	101,000	101,000	120,000	120,000	150,000	150,000
Maximum connection per second	2,000	3,000	4,100	6,800	9,580	12,500
High Availability/ Failover	Active/Passive	Active/Passive	Active/Passive	Active/Passive	Active/Passive	Active/Passive
Host Protection Featrues
Log Auditing	N/A	N/A	N/A	N/A	N/A	N/A
Application Control	N/A	N/A	N/A	N/A	N/A	N/A
Buffer Overflow Exploit Protection	Yes for Services exposed to the Network	Yes for Services exposed to the Network	Yes for Services exposed to the Network	Yes for Services exposed to the Network	Yes for Services exposed to the Network	Yes for Services exposed to the Network
Supported Operating Systems/Platforms	N/A	N/A	N/A	N/A	N/A	N/A
Vulnerability Management Features
Scanning Discovery	N/A	N/A	N/A	N/A	N/A	N/A
Asset Classification	N/A	N/A	N/A	N/A	N/A	N/A
Vulnerability Assessment	N/A	N/A	N/A	N/A	N/A	N/A
Scanning Windows	N/A	N/A	N/A	N/A	N/A	N/A
Workflow Solution	N/A	N/A	N/A	N/A	N/A	N/A
Results Reporting	N/A	N/A	N/A	N/A	N/A	N/A
Mail Security Features
Spam detection rate	>98%	>98%	>98%	>98%	>98%	>98%
False positive rate	<.01% (1 in 10,000)	<.01% (1 in 10,000)	<.01% (1 in 10,000)	<.01% (1 in 10,000)	<.01% (1 in 10,000)	<.01% (1 in 10,000)
Spam and compliance analysis modules	Yes (20+ Customizable)	Yes (20+ Customizable)	Yes (20+ Customizable)	Yes (20+ Customizable)	Yes (20+ Customizable)	Yes (20+ Customizable)
Anti-phishing/Image-based Spam	Yes	Yes	Yes	Yes	Yes	Yes
Granular policy control	Yes	Yes	Yes	Yes	Yes	Yes
Global/group/user settings	Yes	Yes	Yes	Yes	Yes	Yes
End user access	Yes	Yes	Yes	Yes	Yes	Yes

* See sizing guide for detailed information regarding # of concurrent users and active device modules
** Requires optional external bypass unit for fiber interfaces

Documentation:

Download the IBM Proventia Network Multi-Function Security (MFS) - MX5008 and MX5110 Datasheet (PDF).

Download the IBM Proventia Network Multi-Function Security Brochure (PDF).