|
Custom Hardware Logic
The IG200/IG2000 are purpose-built network appliances that use custom
hardware logic to provide optimal price/performance and security effectiveness.
A combination of hardware logic and heuristics enable the IG200/IG2000 to function
inline at the full-duplex rate (200Mbps/2000Mbps) required for true
DDoS protection. IntruGuard's custom hardware logic and a patented architecture
monitor thresholds on all L2, L3, L4 or L7 protocol parameters at Gigabit Ethernet Line Rate.
The hardware logic has specialized features for:
- Anti-spoofing using SYN Cookie, ACK Cookie, SYN Retransmission
- Connection Limiting
- Aggressive Aging
- Legitimate IP Address Matching
- Source Rate Limiting
- Source Tracking
- Granular Rate-limiting and flood detection and prevention at layer 3, 4, and 7
- Protocol Anomaly Recognition at layer 3, 4 and 7
- White listing, Black listing, not tracking certain subnets
IntruGuard's technology is covered through multiple US patents
|
