The DefensePro line of appliances from Radware provide network traffic inspection for deployments from small branch offices to the enterprise. The appliances are deployed in-line and provide security-related functions in regards to the analysis of network traffic.

Key to the functionality of the product is its ability to apply both signature and behavioral-based analysis to traffic, in an attempt to repel known (vulnerability-based) and unknown (such as brute force or application flooding) attacks. According to the vendor, the behavior-based capabilities are based on the appliance's ability to scan for and detect anomalous traffic patterns at the client, application server, and network levels. Once such a pattern is detected, the appliance generates a real-time signature based on the pattern that it then employs to repel the traffic. The real-time signature is generated leveraging fuzzy-logic and up to 20 different parameters, and is modified accordingly as the attack continues. Once the attack subsides the signature is automatically removed.

The DefensePro models are now offered in both IPS and Behavioral Protection models. The IPS lines includes 7 models as follows:

- 102/202/502: A desktop model targeted to branch or perimeter deployments, and featuring 100 Mb/sec (102) of maximum throughput over 2 10/100/1000 ports. The 202 and 502 models leverage the same hardware platform and increase throughput performance to 200 and 500 Mb/sec, respectively.

- 1016/2016: Increases performance to 1 Gb/sec and 2 Gb/sec respectively, with 12 10/100/1000 ports and 4 GigE (SFP) ports. The 1016/2016 is a 1U platform. A dual power supply version is also offered with a 2U footprint.

- 4412/8412: Increase performance to 4 Gb/sec and 8 Gb/sec respectively, with 8 10/100/1000 ports, 4 GigE ports (SFP), and 4 10 Gig ports (XFP). The 4412/8412 is a 2U appliance.

New to the DefensePro line is the addition of the "Behavioral Protection" models, all based on the vendor's On Demand Switch 3S1 hardware platform (2U, with port as in the 4412/8412 above). The Behavioral Models include only the behavioral checking algorithms (no signature analysis) and boast throughput performance of 4 Gb/sec (4412), 8 Gb/sec (8412), and 13 Gb/sec (12412).

The DefensePro products are available now. Pricing ranges from $12,500 (102) up to $170,000 for the high-end models.

Contact Radware for further information.