SECURITY: Intrusion Detection

Software Magazine, April, 2001

NFR Security Inc. releases NFR Network Intrusion Detection (NID), version 5.0. NFR NID 5.0, formerly known as NFR Intrusion Detection Appliance, offers several new product features, including the ability to generate SNMP traps, central management from Linux systems, remote administration, customizable alert descriptions and action responses, database export facilities, and an enhanced Unix user interface.

The product also provides advanced detection capabilities, including the ability to detect both known and unknown attacks.

Features include a comprehensive library of known signatures available, as well as a wide range of filters designed to detect threatening activity for which no signatures have yet been developed. The company's NFR Rapid Response Team produces these filters using the product's extensive customization capabilities. Companies can use these same capabilities to modify existing signatures in order to reduce false positives, and develop new signatures that address organization-specific attacks. The NFR Rapid Response Team can also provide these services.

NFR's platform-independent product is designed to be tamperproof and eliminate many of the vulnerabilities associated with operational environments. Sensors can operate as standalone devices or within a centrally managed, distributed configuration that monitors various resources such as sub-nets, firewalls, and Web, e-mail, application, and database servers. The product can be configured to support the highest performance networks and provides detailed statistical data regarding its own performance.

NFR NID V. 5.0 is available immediately. Pricing is $4,500.