Upload File

hp mobility security ids/ips system series...intrusion detection/prevention system (ids/ips) •...

  • Home
  • Documents
  • HP Mobility Security IDS/IPS System series...Intrusion detection/prevention system (IDS/IPS) • Industry-leading threat detection Protects your organization from emerging threats,
8
Key features • Automatic intrusion threat detection and prevention • Central management of security policies • Complete reporting and predefined compliance reports • Roles-based administrative rights • Appliance and VMware®-ready form factors Product overview HP Mobility Security IDS/IPS System Series is comprised of HP RF Manager and MSM415 Security Sensors. HP RF Manager in combination with the MSM415 Sensor detects and prevents wireless threats with automated policy-based security and location-tracking capabilities with full support for all IEEE 802.11 WLAN networks. The system helps eliminates false positive alerts and uses patented automatic classification and mitigation techniques to block unauthorized wireless traffic without disrupting the performance of authorized wireless devices. The HP MSM415 RF Security Sensor is required to continuously scan IEEE 802.11a/b/g/n networks for wireless threats and enforce their mitigation. The HP Mobility Security IDS/IPS System prevents multiple threats while scanning for new ones, providing industry-leading wireless protection, and it can be deployed to enforce a no-Wi-Fi policy. It has predefined compliance reports for the Health Insurance Portability and Accountability Act (HIPAA), PCI, the Sarbanes-Oxley Act, the Gramm-Leach-Bliley Act, and Department of Defense (DoD) Directive 1800.2. Data sheet HP Mobility Security IDS/IPS System series

Upload: others

Post on 02-Aug-2020

23 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: HP Mobility Security IDS/IPS System series...Intrusion detection/prevention system (IDS/IPS) • Industry-leading threat detection Protects your organization from emerging threats,

Key features

•Automaticintrusionthreatdetectionandprevention

•Centralmanagementofsecuritypolicies

•Completereportingandpredefinedcompliancereports

•Roles-basedadministrativerights

•ApplianceandVMware®-readyformfactors

Product overview

HPMobilitySecurityIDS/IPSSystemSeriesiscomprisedofHPRFManagerandMSM415SecuritySensors.HPRFManagerincombinationwiththeMSM415Sensordetectsandpreventswirelessthreatswithautomatedpolicy-basedsecurityandlocation-trackingcapabilitieswithfullsupportforallIEEE802.11WLANnetworks.

Thesystemhelpseliminatesfalsepositivealertsandusespatentedautomaticclassificationandmitigationtechniquestoblockunauthorizedwirelesstrafficwithoutdisruptingtheperformanceofauthorizedwirelessdevices.TheHPMSM415RFSecuritySensorisrequiredtocontinuouslyscanIEEE802.11a/b/g/nnetworksforwirelessthreatsandenforcetheirmitigation.

TheHPMobilitySecurityIDS/IPSSystempreventsmultiplethreatswhilescanningfornewones,providingindustry-leadingwirelessprotection,anditcanbedeployedtoenforceano-Wi-Fipolicy.IthaspredefinedcompliancereportsfortheHealthInsurancePortabilityandAccountabilityAct(HIPAA),PCI,theSarbanes-OxleyAct,theGramm-Leach-BlileyAct,andDepartmentofDefense(DoD)Directive1800.2.

Data sheet

HP Mobility Security IDS/IPS System series

Page 2: HP Mobility Security IDS/IPS System series...Intrusion detection/prevention system (IDS/IPS) • Industry-leading threat detection Protects your organization from emerging threats,

2

Datasheet|HPMobilitySecurityIDS/IPSSystemseries

Features and benefits

Intrusion detection/prevention system (IDS/IPS)•Industry-leadingthreatdetection

Protectsyourorganizationfromemergingthreats,includingcomprehensiveIEEE802.11nrogueAPs,Multi-Potthreats,denial-of-service(DoS),andWEPcrackingattacks;DoSpreventiondisruptsmaliciousbehaviorandreclaimsbandwidthforyourauthorizedAPsandclients,keepingyourmissioncriticalapplicationsandoptimizingefficiency

•360degreevisibilityintowirelesstraffic

– HPRFManagerenablescustomerstoprotectbothwiredandwirelessnetworksfromwirelessvulnerabilities

– Bycontinuouslyscanningtheairwaves,RFManagerautomaticallyprotectsbusinessesagainstdataleakagethroughthewirelessnetwork

– RFManagercanrapidlyandproactivelydetectandhelpeliminatethreatsthroughaccurateandrobustautomatedclassificationofwirelessdevicesincludingsmartphonesandtablets

•Simplifiedandcomprehensivereportingtools

Automatedreportgenerationanddeliverymakecomplexwirelessauditsa“hands-off”process

•Scalablefrommidmarkettolargeenterprise

– SupportsallHPwirelesssolutions

– Managesupto600sensorsperHPRFManagerforVMware50SensorE-LTU(J9838AAE).

•AdvancedWIPSoption

– WLANperformancemanagementsummarizesissueswithconfigurablealertsonbandwidth,configuration,RFcoverage,andinterferencestatus;hascustomizablecontrolsforseverity,display,notification,andreal-timealertsofperformanceevents

– SmartForensicsenablestwo-clickdrilldownforaccuratethreatdetectionandanalysis,physicallocationtracking,andaudittrailsofsystemandadminactions

– SupportedonlyonHPRFManagerv6.0andlater

Technical features•WirelessIDS/IPSfeatures

– Accuratelyauto-classifiesAPsandclientdevicesusingpatentedauto-classificationtechniquestoblockgenuinethreats

– Automaticallypreventsdenial-of-serviceattacksandmorethan20threatssimultaneouslyfromasinglesensorwhilecontinuingtoscanforthreats

– Pinpointsthephysicallocationofvulnerableorthreat-posingdevices

– Blocksunauthorizedtrafficwithoutnetworkdisruption

– Detectsandlocatesnon-Wi-FiinterferenceandRFjamming

•ProtectionagainstrogueIEEE802.11a/b/g/naccesspointsandwirelessnetworks

LeveragestheHPMSM415RFSecuritySensortoprovide24x7securitydetectionandpreventioncapabilitiesforthewirelessnetwork

Page 3: HP Mobility Security IDS/IPS System series...Intrusion detection/prevention system (IDS/IPS) • Industry-leading threat detection Protects your organization from emerging threats,

3

Datasheet|HPMobilitySecurityIDS/IPSSystemseries

•WEPcrackingandimpersonationattacks

ProtectagainstactiveWEPcrackingandimpersonationattacks

•Identificationofperformanceproblems

Occursproactivelybeforeimpacttoendusers;categorizesthepotentialsource,suchasconfigurationissues(specificallyincorrectchannelallocation,sub-optimalIEEE802.11nprotocolsettings),bandwidth(poorutilization,lowaverage,datarate,excessiveoverhead),andRF(non-Wi-Fiinterference,channelcrowding)

•IntegrationwithHPMSMController

ReducesadministrationtimeandeffortthroughautomaticsynchronizingofauthorizedAPsandclientswithMSMcontrollers

•Centralmanagementofsecuritypolicies

Givesadministratorstheflexibilitytocustomizewirelesssecuritypolicieswithsite-specificguidelines

•Out-of-the-boxandcustomreports

Emailedhourly,daily,oratcustom-definedintervals,thesereportshelpensurethatadministratorsalwayshavetheessentialinformationtheyneedtomanagethenetworkeffectively

•Automatedregulatorycompliancereporting

– Simplifiesperforminginternalandregulatoryauditswitheasy-to-useauditingandreportingtools

– Predefinedreportsmapwirelessvulnerabilitiestospecificdatasecuritycompliancestandards,suchasPCI,Sarbanes-Oxley(SOX),HIPAA,Gramm-Leach-Bliley(GLBA),andDoDDirective1800.2

– On-wireoroff-wireclassificationfiltersneighboringdevicesfromthereports,helpeliminatetheguessworkandtimeneededtovalidatevulnerabilityscans

•Roles-basedadministrativerights

ProvidetheproperlevelsofsecurityandmanagementaccessoverthenetworkandtheRFManagerControllermanagementinterface

•Location-basedpolicymanagement

SimplifiesthesecurityandadministrationofadistributedWLANdeploymentthroughgranular,customizablepolicieslocalizedonasite-by-site,region-by-region,orevenfloor-by-floorbasis

•Offlinesensoroperation

– Providesfullsecuritycoverage(detection,classification,andprevention)evenwhenthereisnoconnectivitybetweenthesensorandtheRFManager

– Raisesalertsandevents,storesthem,andsynchronizesthemwiththeRFManageronreconnection

•IntegrationwithHPRFPlanner

AllowsimportingofplanninganddeviceplacementinformationfromHPRFPlanner

Page 4: HP Mobility Security IDS/IPS System series...Intrusion detection/prevention system (IDS/IPS) • Industry-leading threat detection Protects your organization from emerging threats,

4

Datasheet|HPMobilitySecurityIDS/IPSSystemseries

Warranty and support•LimitedLifetimeWarranty2.0

AdvancehardwarereplacementoftheHPMSM415RFSecuritySensorwithnext-business-daydelivery(availableinmostcountries).Seehp.com/networking/warrantysummaryfordurationdetails

•ElectronicandtelephonesupportfortheHPMSM415RFSecuritySensor

Limited24x7telephonesupportisavailablefromHPforthefirstthreeyears;limitedelectronicandbusinesshourstelephonesupportisavailablefromHPfortheentirewarrantyperiod;toreachoursupportcenters,refertohp.com/networking/contact-support;fordetailsonthedurationofsupportprovidedwithyourproductpurchase,refertohp.com/networking/warrantysummary

•ElectronicandtelephonesupportforHPRFManagerforVMware50SensorE-LTU

Limitedelectronicand24x7telephonesupportisavailablefromHPfortheentirewarrantyperiod;toreachoursupportcenters,refertohp.com/networking/contact-support;fordetailsonthedurationofsupportprovidedwithyourproductpurchase,refertohp.com/networking/warrantysummary

•Softwarereleases

Refertohp.com/networking/support;fordetailsonthesoftwarereleasesavailablewithyourproductpurchase,refertohp.com/networking/warrantysummary

http://www.hp.com/networking/warrantysummary
http://www.hp.com/networking/contact-support
http://www.hp.com/networking/warrantysummary
http://www.hp.com/networking/warrantysummary
http://www.hp.com/networking/contact-support
http://www.hp.com/networking/warrantysummary
http://www.hp.com/networking/warrantysummary
http://www.hp.com/networking/support
http://www.hp.com/networking/warrantysummary
Page 5: HP Mobility Security IDS/IPS System series...Intrusion detection/prevention system (IDS/IPS) • Industry-leading threat detection Protects your organization from emerging threats,

5

Datasheet|HPMobilitySecurityIDS/IPSSystemseries

HP Mobility Security IDS/IPS System Series

HP RF Manager for VMware 50 Sensor E-LTU (J9838AAE) HP MSM415 RF Security Sensor (J9522A)

I/O ports and slots 1RJ-45autosensing10/100/1000port(IEEE802.3Type10BASE-T,IEEE802.3uType100BASE-TX,IEEE802.3abType1000BASE-T);Duplex:10BASE-T/100BASE-TX:halforfull;1000BASE-T:fullonly

1RJ-45serialconsoleport

AP characteristics Radios(built-in)AntennaNumberofinternalantennas

802.11a/b/g/nDual-band2.4/5GHzomnidirectionalantennas3

Physical characteristicsDimensionsWeight

5.19(w)x6.16(d)x1.94(h)in(13.18x15.65x4.93cm)0.72lb(0.33kg)mountingbracket

Mounting and enclosure Indoor,plenumrated;Includestwomountingclips

EnvironmentOperatingtemperatureOperatingrelativehumidityNonoperating/StoragetemperatureNonoperating/Storagerelativehumidity

32°Fto122°F(0°Cto50°C)5%to95%,noncondensing-40°Fto158°F(-40°Cto70°C)5%to95%,noncondensing

Electrical characteristicsDCvoltageMaximumpowerrating

PoweredbyPoE8W

Page 6: HP Mobility Security IDS/IPS System series...Intrusion detection/prevention system (IDS/IPS) • Industry-leading threat detection Protects your organization from emerging threats,

6

Datasheet|HPMobilitySecurityIDS/IPSSystemseries

HP RF Manager for VMware 50 Sensor E-LTU (J9838AAE) HP MSM415 RF Security Sensor (J9522A)

Safety UL2043;UL60950-1;IEC60950-1;EN60950-1;CAN/CSA-C22.2No.60950-1

Emissions FCCpart15ClassA;EN55022ClassA;CISPR22ClassA;ICES-003

Immunity GenericHarmonicsFlicker

EN55024EN61000-3-2,IEC61000-3-2EN61000-3-3,IEC61000-3-3

RF Exposure FCCBulletinOET-65C;RSS-102

Features Defaultsupportedsensors:50Maximumsupportedsensors:600(viaoptionalRFManager50-sensorupgradepurchases,orJ9399AAE)

RFSensorcharacteristics•Single(IEEE802.11n/a/b/g),RadioOperationModes;RFsecurity,OperationModes;Controlled

•IEEE802.11a/b/g/n

•Maximumtransmitpowervariesbycountry

Notes HPRFManagerforVMwarerequiresuseoftheHPMSM415RFSecuritySensor.HPRFManagerforVMwaredoesnotincludeaVMwarelicense.

TheHPRFManagerIDS/IPSController(J9521A)orRFManagerforVMware(J9838AAE)isrequiredtomanagetheHPMSM415RFSecuritySensor.

Services RefertotheHPwebsiteathp.com/networking/servicesfordetailsontheservice-leveldescriptionsandproductnumbers.Fordetailsaboutservicesandresponsetimesinyourarea,pleasecontactyourlocalHPsalesoffice.

RefertotheHPwebsiteathp.com/networking/servicesfordetailsontheservice-leveldescriptionsandproductnumbers.Fordetailsaboutservicesandresponsetimesinyourarea,pleasecontactyourlocalHPsalesoffice.

http://www.hp.com/networking/services
http://www.hp.com/networking/services
Page 7: HP Mobility Security IDS/IPS System series...Intrusion detection/prevention system (IDS/IPS) • Industry-leading threat detection Protects your organization from emerging threats,

7

Datasheet|HPMobilitySecurityIDS/IPSSystemseries

HP Mobility Security IDS/IPS System Series accessories

HPRFManagerforVMware50SensorE-LTU(J9838AAE)

HPRFManagerAdditional50-SensorUpgradeE-LTU(J9399AAE)HPRFManagerAdvWirelessIPSLicense(J9644A)

Learn more athp.com/networking

http://www.hp.com/networking
Page 8: HP Mobility Security IDS/IPS System series...Intrusion detection/prevention system (IDS/IPS) • Industry-leading threat detection Protects your organization from emerging threats,

RatethisdocumentSharewithcolleagues

Sign up for updates hp.com/go/getupdated

Datasheet|HPMobilitySecurityIDS/IPSSystemseries

©Copyright2009-2010,2013-2014Hewlett-PackardDevelopmentCompany,L.P.Theinformationcontainedhereinissubjecttochangewithoutnotice.TheonlywarrantiesforHPproductsandservicesaresetforthintheexpresswarrantystatementsaccompanyingsuchproductsandservices.Nothinghereinshouldbeconstruedasconstitutinganadditionalwarranty.HPshallnotbeliablefortechnicaloreditorialerrorsoromissionscontainedherein.

VMwareisaregisteredtrademarkortrademarkofVMware,Inc.intheUnitedStatesand/orotherjurisdictions.

4AA2-9840ENW,December2014,Rev.3

https://hpresearch.az1.qualtrics.com/SE/?SID=SV_6EuQKOr2Ku1CUzH&CMG=CMG490&Pubnumber=4AA2-9840ENW&BU=Networking&Doctype=DS
http://www.facebook.com/sharer.php?u=http://h20195.www2.hp.com/V2/GetDocument.aspx?docname=4AA2-9840ENW.pdf
http://twitter.com/home/?status=HP%20Mobility%20Security%20IDS/IPS%20System%20series+%40+http%3A%2F%2Fh20195.www2.hp.com%2FV2%2FGetDocument.aspx?docname=4AA2-9840ENW
http://www.linkedin.com/shareArticle?mini=true&ro=true&url=http%3A%2F%2Fh20195%2Ewww2%2Ehp%2Ecom%2FV2%2FGetDocument%2Easpx%3Fdocname%3D4AA2-9840ENW&title=HP+Mobility+Security+IDS/IPS+System+series+&armin=armin
http://www.hp.com/go/getupdated

HARDENING IDS/IPS Technologies

Understanding Ips Ids Ips Ids Defense in Depth 1381

Présentation IPS IDS

Firewall and IDS/IPS - PoliTO

IPS-1 key benefitSCheck Point IPS-1™ is a dedicated intrusion detection and prevention system (IDS/IPS) that helps organizations secure their enterprise network, and protect servers

Computer Security and Intrusion Detection(IDS/IPS)

BAO CAO IDS-IPS

IDS/IPS Definition and Classification

Los IDS y los IPS

14 IDS IPS Firewalls

Ids ips detection

Cisco Wireless and Network IDS/IPS IntegrationThe wireless IDS/IPS features of the Cisco WLC and the network IDS/IPS features of the Cisco IPS platforms are key elements of an integrated,

Integrate Suricata - EventTracker › EventTracker › media › ...open source-based Intrusion Detection System (IDS), Suricata is a high performance Network IDS, IPS and Network

IDS IPS e Entropia

IDS/IPS Definition and Classification. Contents Overview of IDS/IPS Components of an IDS/IPS IDS/IPS classification –By scope of protection –By detection

IDS/IPS - WordPress.com · SNORT IDS/IPS By: Darryl Akeung [email protected] daakeung.wordpress.com. WHAT IS AN IDS? • An Intrusion detection system (IDS) is software and/or hardware

IDS/IPS Definition and Classification. 2/57 Contents Overview of IDS/IPS Components of an IDS/IPS IDS/IPS classification –By scope of protection –By detection

Baudoin karle-ids-ips

08-IDS IPS 2 [Compatibility Mode]

Ids and Ips Report

E-Guidedocs.media.bitpipe.com/io_25x/io_25953/item_405237...E-Guide IDS vs. IPS When it comes to intrusion detection systems (IDS) and intrusion prevention systems (IPS) it’s not

Snort IDS/IPS Basics

IDS/IPS Evasion Techniques - Redbrickanev/IDS_IPS_Evasion_Techniques.pdf · Agenda Intrusion Detection System (IDS) Intrusion Prevention System (IPS) Alan Neville, March 2012 Information

Chapitre 4 IDS/IPS

Snort IPS - cisco.com · Snort IPS TheSnortIPSfeatureenablesIntrusionPreventionSystem(IPS)orIntrusionDetectionSystem(IDS)for

Ids Ips Mikrotik

Intrusion Prevention, Detection & Response. IDS vs IPS IDS = Intrusion detection system IPS = intrusion prevention system

IDS vs IPS

Intrusion Detection Systems (IDS) · Suricata Intrusion Detection System •Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine. •It is open source

Snort IPS · Snort IPS TheSnortIPSfeatureenablesIntrusionPreventionSystem(IPS)orIntrusionDetectionSystem(IDS)for

Virtualizing Suricata* IPS Using Hyperscan Pattern Matching · Suricata* Overview Suricata is an open source-based intrusion detection system (IDS), intrusion prevention system (IPS),

C HAPTER 16 C ISCO IOS IPS. S ECURING N ETWORKS WITH IDS AND IPS Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) sensors protect

NT Réseaux IDS et IPS

Day 19. Security Tools Firewalls –Host Based –Network based IDS/IPS –Host Based –Network based –Signature based detection –Anomaly based detection Anti

Introduction to IDS & IPS - Part 1