IPS Review Sourcefire

I need the detailed information about the IPS Review Sourcefire. Can you give me the information about it and please give it to me as soon as possible.

[Shaleen]

According to SC Magazine, “The Sourcefire Next-Generation IPS v4.9 is a distributed appliance-based offering modeled on the Snort detection engine. It is part of the Sourcefire 3D System that provides a suite of tools for delivering real-time user and network awareness. The Sourcefire Intrusion Prevention System (IPS) is one of the components of the Sourcefire 3D System that runs on the 3D Sensor. IPS allows one to monitor a network for attacks that can affect the availability, integrity or confidentiality of hosts on the network. By placing 3D Sensors on key network segments, one can examine the packets that traverse the network for malicious activity. Each 3D Sensor uses rules, decoders and preprocessors to look for the broad range of exploits that attackers can develop.

A typical Sourcefire IPS deployment consists of one or more physical Defense Center management console appliances deployed on a trusted network and multiple physical IPS appliances distributed throughout the environment. The appliance can be installed in either a passive, inline, or inline with fail-open deployment option. IPS and Defense Center appliances also can be deployed as software on VMware vSphere and open source Xen hosts to monitor VM-to-VM traffic.”