IntruGuard Devices Announces Expanded Capabilities for IG200/2000 DDoS Firewalls

New features enhance protection from Denial of Service attacks with anti-spoofing techniques and multiple scan detection and prevention methods

Sunnyvale, April 12, 2006. IntruGuard Devices, Inc., a leading provider of DDoS Firewalls to web hosting, Internet service providers, financial, enterprise, and data centers today announced a series of new feature options for the IG200/2000 family are immediately available. The latest enhancements improve the user’s ability to prevent denial of service (DoS) and distributed denial of service (DDoS) attacks with unparalleled accuracy. New capabilities include anti-spoofing techniques, and network, port, and dark address scan protection.

DoS and DDoS attacks are becoming increasingly prevalent. The 2005 CSI/FBI Computer Crime and Security Survey reveals such attacks as the number one non-theft related form of misuse observed1. In its recent Internet Security Threat Report, Symantec observed that denial-of-service attacks grew from an average of 119 per day in 2004 to 1402 per day during the second half of 2005 - a 1000 percent increase2. Such attacks usually go unreported as they are increasingly targeting e-commerce and data center sites as part of an extortion plot.

As scanning techniques are often used as a precursor to an assault, the new capabilities include complete prevention of these methods, including port, network, and “dark address” or bogon IP address scans. Port and network scans are well known probing techniques looking for system vulnerabilities and internal network information which then lead to a hacker intrusion. The new features evaluate and block these network and port scans by evaluating the rate at which such scans normally take place and blocking those outside a predetermined threshold. The IG200/2000’s Microfine GranularityTM  is composed of over three million such thresholds, a thousand times the number of competing products. The appliances automatically and continuously update every threshold and blocks excessive scanning and the subsequent assault without affecting legitimate traffic. Such ultra granular analysis methods are required to ensure accuracy.

Dark address scanning is associated with worm-attacks wherein the worms spread through randomly accessing machines in the network.  Dark address scans often are part of a DDoS attack and the IG200/2000 identifies and blocks such scans, along with all other forms of attack, within two seconds without user intervention. Legitimate traffic continues to proceed at up to bi-directional gigabit rates while malicious traffic up to this traffic level will be dropped.

“Dark address scan prevention, using hardware based logic catches network worms at zero-minute without any manual intervention. Similarly by implementing network scan and port scans prevention in hardware we have created a new benchmark.” according to Hemant Jain, CTO of IntruGuard. “New threshold management enhancements make this device unique in its class making it a true set-it-and-forget-it appliance.”

Ease-of-use has also been enhanced in the IG200/2000 family through the use of a “one-click” administrator setting change. When anticipated temporary changes to traffic patterns are expected, the administrator can easily change all thresholds at once with one entry. SNMP functionality has been added for simplified system management.

These latest feature options for DDoS Firewall systems from IntruGuard Devices, Inc. are available now. Adding these new capabilities to the IG 200/2000 is a simple upgrade. Pricing for the dual fast Ethernet IG200 starts at $11,995 with the Dual gigabit Ethernet IG2000 price starting at $24,995.

About IntruGuard Devices, Inc.

IntruGuard’s mission is to secure high-value Internet services and network infrastructure by delivering built-for-purpose systems for Intrusion and Day Zero DoS and DDoS Attack Prevention. The company serves enterprises, government agencies and service providers that are under pressure to deliver surefire network and application performance under all conditions. IntruGuard’s IG 200 and IG 2000 security appliances will defeat any intruder attempting to mount a rate-based attack on servers, subnets or networks. The IG 200 and IG 2000 deliver maximum performance, intelligence and ease of deployment in security appliances. The company is headquartered in Sunnyvale, CA. (www.intruguarddevices.com)

• FBI/CSI 2005 Computer Crime and Security Survey. By Lawrence Gordan, et al.
• Symantec Internet Security Threat Report. Trends for July 05-December 05, Volume IX, Published March 2006

Press Contact:
IntruGuard Devices, Inc.

John Gudmundson
johng@intruguarddevices.com
Phone:408-400-4223
Fax: 408-400-4101