Sourcefire Intrusion Prevention System - Enterprise IPS

Lower costs, network downtime, false positives/negatives, and human intervention required to run your intrusion prevention system.

Every organization needs a real-time network defense to protect its critical assets. Sourcefire IPS can meet your needs and grow with you with throughput options up to 10 Gbps. Sourcefire IPS provides vulnerability-based intrusion prevention built on the foundation of Snort®, the world's most popular intrusion prevention software.

Grow with Sourcefire IPS™

Most providers offer a “one-size-fits-all” IPS, but Sourcefire is different. Our solution is divided into three customer protection phases — IPS, Adaptive IPS, and Enterprise Threat Management (ETM) — with each phase building upon the benefits and features of the previous one, adding capabilities to optimize a company’s network protection.

• IPS: Based on the award-winning Snort® detection engine, Sourcefire IPS provides best-in-class intrusion defense with extensive analytics, powerful reporting, and unrivaled scalability. Through the use of Sourcefire 3D Sensors with the IPS module and one or more Sourcefire Defense Center™ management consoles, the IPS phase enables you to detect and/or block attacks targeting thousands of vulnerabilities.
• Adaptive IPS: Adaptive IPS allows you to know what is on your network--in real time, all the time. The network intelligence is derived from Sourcefire RNA® (Real-time Network Awareness) which enables automated threat impact assessment and automated IPS tuning. Adding RNA to your 3D Sensors significantly reduces false positives and false negatives and allows small IT security staffs to effectively monitor large networks.
• Enterprise Threat Management: ETM is the integration of a variety of network security technologies under one management console. You reduce risks before attacks by knowing when new hosts appear and monitoring for IT policy compliance. By getting the maximum amount of network security information, you can baseline your network to detect internal anomalies and detect compromise to rapidly shield your critical systems. With ETM, you get a level of network knowledge, visibility, and awareness that no other approach can provide.

Sourcefire IPS™ is very different from a traditional IPS solution. The illustration below compares the Sourcefire 3D™ System to a traditional IPS solution.

Save Time by Reducing False Positives and Negatives

By implementing Sourcefire IPS, you can significantly reduce false positives and negatives, allowing security analysts to focus their efforts on those security events that matter most. This greatly reduces operating cost and significantly reduces the potential for network downtime.
Protect your critical assets while saving time and reducing costs.