Intrusion Prevention Service (IPS) is a fully integrated security subscription. It works in tandem with the application layer content inspection of the XTM to provide real-time protection against network threats, including spyware, SQL injections, cross-site scripting, and buffer overflows. IPS scans tra ffic on all major protocols, using continually updated signatures to detect and block all types of threats. And because IPS is integrated with WatchGuard XTM security appliances, you have an easy-to-manage, cost-effective solution without additional hardware to purchase and maintain.
Flexible administrator control
Have the flexibility to define the action to be taken when malware is identified - enabling the network to allow, block, or lock questionable tra ffic based on type, user/group, protocol, and severity.
Comprehensive threat signatures
Over 15,000 signatures cover a broad range of threats, including SQL injections, cross-site scripting (XSS), buffer overflows, denial of service, and remote file inclusions.
Continually updated database
Signatures are updated without interruption as new threats emerge, so you never have to leave your network exposed.
Highly effective scanning
Scans all major protocols, including HTTP, HTTPS, FTP, TCP, UDP, DNS, SMTP, and POP3 to block network, application, and protocol-based attacks.
Assign specific actions to take depending on the level of the threat - each signature has a severity assigned.
Automated source blocking
IP addresses identified as the source of an attack are automatically blocked to prevent further malicious traffic from entering your network.
Manage all security functionality on your WatchGuard XTM appliance, including IPS, from a single intuitive console for maximum efficiency and ease of use.
Cost effective solution
Provide network-wide protection for all users configured behind your WatchGuard XTM firewall with a single IPS subscription.