Home / Research Reports / Network Security / Network Intrusion Prevention

Network Intrusion Prevention

Network Intrusion PreventionNetwork Intrusion Prevention Systems (IPS) are an important part of any enterprise security solution. Designed to identify and block attacks against internal computing assets, a good IPS can provide temporary protection and relief from the immediate need to patch affected systems. The IPS must catch sophisticated attacks while producing nearly zero false positives.

NSS Labs is recognized as the de facto standard for rigorous testing of Network IPS products. Test reports address security effectiveness, real-world performance, stability, manageability and anti-evasion capabilities. IPS group test reports compare total cost of ownership, presented in our proprietary security value map to enable apples-to-apples comparisons. 

Our latest comparative IPS reports will be arriving in mid-2012, following individual Product Analysis Reports on leading IPS products. Find out more about our 2012 testing series here.

Categories

Reports

An independent test of the HP TippingPoint 6100N IPS. While the
upcoming Intrusion Prevention Systems Group Test Reports will provide comparative information about all tested products, this Product Analysis provides detailed information not available elsewhere. Learn More »

Subscription
required

An independent test of the Sourcefire 8260 IPS. While the
upcoming Intrusion Prevention Systems Group Test Reports will provide comparative information about all tested products, this Product Analysis provides detailed information not available elsewhere. Learn More »

Subscription
required

An independent test of the McAfee Network Security Platform (NSP) XC Cluster IPS. While the
upcoming Intrusion Prevention Systems Group Test Reports will provide comparative information about all tested products, this Product Analysis provides detailed information not available elsewhere. Learn More »

Subscription
required

An independent test of the Sourcefire 8250 IPS. While the
upcoming Intrusion Prevention Systems Group Test Reports will provide comparative information about all tested products, this Product Analysis provides detailed information not available elsewhere. Learn More »

Subscription
required

An independent test of the Sourcefire 8120 IPS. While the
upcoming Intrusion Prevention Systems Group Test Reports will provide comparative information about all tested products, this Product Analysis provides detailed information not available elsewhere. Learn More »

Subscription
required

During Q4 2010 NSS Labs performed the industry’s most rigorous
test of leading IPS solutions as an update to our Q4 2009 test. Vendors tested: Check Point, Cisco, Endace, Fortinet, IBM, Juniper, McAfee, NSFOCUS, Palo Alto Networks, Sourcefire, Stonesoft. Learn More »

Subscription
required

Get the real truth about the security, performance, total cost of
ownership (TCO), and manageability of 15 leading network IPS. Learn More »

Subscription
required

An independent test of the Sourcefire 3D8260 IPS Appliance performed as a supplement to our Q4 2010 group test of 13 network intrusion prevention systems (IPS). Learn More »

Free

During Q3 2010, NSS Labs performed an independent group test
of network intrusion prevention systems (IPS) currently on the market. This reports details the results of the McAfee M-8000. Learn More »

Subscription
required

During Q3 2010, NSS Labs performed an independent group test of network intrusion detection and prevention systems (IDS / IPS) currently on the market. As part of this test, Endace submitted the EP Core-100 Network IDS, which was deployed out-of-band to a 10Gbps monitoring port. As an IDS, the product ratings refer to detection of attacks, rather than prevention. Learn More »

Purchase

An independent test of the Check Point Power-1 11065.
NSS Labs evaluated the product configured with the default, "out-of-the-box" settings, then again as optimally tuned by Check Point prior to testing to provide a range of information on key IPS security effectiveness and performance dimensions. Learn More »

Subscription
required

An independent test of the Palo Alto Networks PA-4020.
NSS Labs evaluated the product configured with the default, "out-of-the-box" settings, then again as optimally tuned by Palo Alto Networks prior to testing to provide a range of information on key IPS security effectiveness and performance dimensions. Learn More »

Subscription
required

During 2010, NSS Labs performed an independent group test of
network intrusion prevention systems (IPS) currently on the market. This reports details the results of the Stonesoft IPS-3205. Learn More »

Subscription
required

During 2010, NSS Labs performed an independent group test of
network intrusion prevention systems (IPS) currently on the market. This reports details the results of the IBM Proventia Network IPS GX6116. Learn More »

Subscription
required

During 2010, NSS Labs performed an independent group test of
network intrusion prevention systems (IPS) currently on the market. This reports details the results of the Cisco 4260 Sensor Learn More »

Subscription
required

During 2010, NSS Labs performed an independent group test of
network intrusion prevention systems (IPS) currently on the market. This reports details the results of the Sourcefire 3D 4500. Learn More »

Subscription
required

During 2010, NSS Labs performed an independent group test of
network intrusion prevention systems (IPS) currently on the market. This reports details the results of the Fortinet FortiGate 3810A. Learn More »

Subscription
required

During 2010, NSS Labs performed an independent group test of
network intrusion prevention systems (IPS) currently on the market. This reports details the results of the Juniper IDP-8200. Learn More »

Subscription
required

During 2010, NSS Labs performed an independent group test of
network intrusion prevention systems (IPS) currently on the market. This reports details the results of the Juniper SRX-3600. Learn More »

Subscription
required

During 2010, NSS Labs performed an independent group test of
network intrusion prevention systems (IPS) currently on the market. This reports details the results of the Stonesoft IPS-1205. Learn More »

Subscription
required

Comprehensive evaluation of the NSFOCUS Network IPS 1200
against our Intrusion Prevention System v6.0 test methodology. Learn More »

Subscription
required

Learn More »

Purchase

In Q2 of 2010, NSS Labs performed thorough testing of the Radware DefensePro 8412 against our Attack Mitigator v2.0 testing methodology. This report summarizes the results from the tests performed at the NSS Labs facility. Learn More »

Purchase

During Q4 2009, NSS Labs performed an independent group test of 15 network intrusion prevention systems (IPS) currently on the market. As part of this test, TippingPoint submitted the 660N Network IPS. Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Purchase

Learn More »

Free

Learn More »

Free

Comprehensive testing of the IBM Proventia Server for Linux 2.0 against our Datacenter Server Security v1.1 testing methodology. Learn More »

Free

Learn More »

Purchase