McAfee is covering both ends of the intrusion detection and prevention scale by offering both hardware-based systems and software-based ones. Let's start with the hardware.The 1200 and 2600 series of Intrushield IPSes are in a 1RU form factor, while the 4000 is a 2RU chassis. All the chassis appear very robust and well constructed. Each of these devices is designed to offer complete transparency when monitoring network traffic.
An interesting design feature is the pass-through ports for the network connections; they are hardwired through, so even if the machine fails, the network traffic can still be routed through without being cut off.
McAfee likes to talk about the concept of virtual intrusion detection and prevention systems, similar to network switches that support virtual LANs (VLANS). Basically this means each sensor can be segmented into a number of virtual sensors; each can then be customised with different rules and policies, from focusing on a single IP address on the network to a group of machines. These units or sensors also incorporate an internal firewall, which can also be virtualised. This internal firewall is not designed to replace the existing firewall at the network perimeter. However, it allows the option to implement stronger security policies and procedures to enable further protection for critical resources on the network by the intelligent placement of sensors.
Overall, McAfee's appliances are a very scalable solution, again one to definitely shortlist on any evaluation, particularly for large organisations' security needs. Particular note should be placed on the internal firewall and IPS virtualisation features.
 |
|
|
|||
| |||||
| Product | McAfee Intrushield |
| Price | I-1200 AU$19,633.93 |
| Vendor | McAfee |
| Phone | 1800 644 646 |
| Web | www.mcafee.com.au |
| Interoperability |
|
| Several models available with excellent features. | |
| Futureproofing |  |
| Range of models with clear upgrade paths. | |
| ROI |  |
| Pricing seems competitve with other IPS hardware vendors, considering performance. | |
| Service |  ½ |
| Warranty and service renewable annually with service contract. | |
| Rating |  |
