H3C Technologies H3C SecBlade IPS Cards - Manual (Page 9)

2
SecBlade IPS Cards Overview
Introduction
H3C Intrusion Prevention System (IPS) products fall into two categories.
1. H3C SecPath T series
• T200 series: T200, T200-E (enhanced), T200-A (advanced), T200-M (middle), T200-S (standard)
• T1000 series: T1000-A (advanced), T1000-M (middle), T1000-S (standard), T1000-C (compact)
• T5000 series: T5000-S3
2. H3C SecBlade IPS card series
• LSWM1IPS10: Applicable to H3C S5800/S5820X series switches that support OAA
• LSQ1IPSSC0: Applicable to H3C S7500E series switches
• LSB1IPS1A0: Applicable to H3C S9500 series switches
• LSR1IPS1A1: Applicable to H3C S9500E series switches
• LST1IPS1A1: Applicable to H3C S12500 series switches
• SPE-IPS-200: Applicable to H3C SR6600 routers
• IM-IPS: Applicable to H3C SR8800 routers
In this manual, the switches and routers that support ISP cards are referred to as main network devices.
This manual mainly describes the features and typical configuration of the two types of H3C SecBlade
IPS cards.
H3C IPS products are mainly online deployed on the key paths of user networks and perform Layer 2
through Layer 7 data analysis in real time to precisely identify and stop/limit various attacks and network
abuses such as hackers, worms, viruses, Trojans, DoS/DDoS, scans, spyware, protocol anomalies,
phishing, P2P, IM, and network games, and to ensure the security, service continuity and performance of
network applications.
H3C IPS products can also be deployed in bypass mode to implement intrusion detection. In addition,
H3C IPS products provide powerful, practical bandwidth management and URL filtering functions.
H3C SecBlade IPS cards are based on the latest hardware platform and architecture of H3C. They
support distributed deployment, centralized management and flexible scalability, and can be managed
using a web browser. H3C SecBlade IPS cards can be inserted to the main network devices to satisfy the
traffic management needs of users.
Main Characteristics
• SecBlade IPS cards enable main network devices to provide network security services without
affecting data forwarding performance.
• SecBlade IPS cards are based on the H3C Open Application Architecture (OAA). A SecBlade IPS
card is connected to a main network device through an internal 10GE Ethernet interface. The
wire-speed forwarding capability of the back card of the main network device ensures smooth data
exchange with the SecBlade IPS card.