Enterasys Dragon Network Sensor Appliance GE500

Enterasys Dragon Network Sensor Appliance GE500 ... network.

Placed at network aggregation points, the Dragon Network Sensor is unmatched in detecting intrusions via signature, protocol, and anomaly-based techniques. Application-based event detection detects non-signature-based attacks against commonly targeted applications including HTTP, RPC and FTP. These multi-method detection techniques, combined with an extensive, frequently updated signature database and false-positive tuning capabilities, ensure that no intrusion goes undetected.

When an attack is detected, Dragon Network Sensor employs a variety of Active Response techniques to block the would-be intruder, including taking action to stop the sessions and reconfiguring firewall policies or switch and router Access Control Lists.

Dragon Network Sensor offers market-leading deep Forensics capabilities, including flexible packet capture, complete session reconstruction, and highly configurable Session VCR (collects all session information for services such as HTTP, FTP, POP and certain IPs or networks) that is needed to analyze network-based attacks.