Traffic Scanner
The Traffic Scanner (TS) is a network intrusion detection system for networks up to 10 Gbps (depends on the size of the rule set). It is used as a hardware accelerator of IDS application Snort, which is the de facto standard for intrusion detection. The stand-alone Snort is not capable to process all incoming packets on 1 Gbps Ethernet links, so it is not able to perform a full protection against network threats. For this reason, it is necessary for high-speed networks to be outfitted with hardware-accelerated IDS - the Traffic Scanner. Traffic Scanner compares all incoming packets in hardware with all rules and only malicious packets are forwarded to Snort for further analysis. With this system, our customers are able to ensure reliable function of IDS and IPS systems on backbones up to 10 Gbps (for the complete Snort database 3,2 Gbps).
Documentation
Features
- Passive monitoring of multiple Gigabit interfaces
- System throughput up to 6 Gbps
- Capable to cover the whole Snort database
- Exporting suspicious packets via PCI-Express bus
- Substantially accelerated Snort
- Act as ordinary NIC - transparent for software NIDS
- Prepared filtration rule sets
Target Applications
- Snort acceleration
- Malicious traffic detection
- Detection and blocking of P2P applications
- Prevention of confidential data leaks
- VoIP applications
- Packet sniffing
- L7 layer analysis
Please contact us for pricing and additional information about this product.