Symantec 10521146 Administration Guide - Page 16

16 Introduction About the Symantec Network Security foundation activities, backdoors, buffer overflow attempts and blended threats like MS Blaster and SQL Slammer. In addition to the features it shares with the Symantec Network Security 4.0 software, the Symantec Network Security 7100 Series appliance offers: ■ In-line Operation: The 7100 Series appliance can be deployed in-line as a transparent bridge to perform real-time monitoring and blocking of network-based attacks. This ability to prevent attacks before they reach their targets takes network security to the next level over passive event identification and alerting. The 7100 Series appliance's One-Click Blocking feature enables users to automatically enable blocking on all in-line interfaces with the click of a single button, saving critical time in the event of worm attacks. ■ Policy-based Attack Prevention: Deployed in-line, the 7100 Series appliance is able to perform session-based blocking against malicious traffic, preventing attacks from reaching their targets. Predefined and customizable protection policies enable users to tailor their protection based on their security policies and business need. Policies can be tuned based on threat category, severity, intent, reliability and profile of protected resources, and common or individualized policies can be applied per sensor for both in-line and passive monitoring. ■ Interface Grouping: 7100 Series appliance users can configure up to four monitoring interfaces as an interface group to perform detection of attacks for large networks that have asymmetric routed traffic. A single sensor handles all network traffic seen by the interface group, keeping track of state even when traffic enters the network on one interface and departs on another. This feature greatly increases the attack detection capacity of the 7100 Series and allows it to operate more effectively in enterprise network environments. ■ Dedicated Response Ports: The Symantec Network Security 7100 Series provides special network interfaces for sending anonymous TCP resets to attackers. With this configuration, network monitoring continues uninterrupted even when sending resets. ■ Reduced Total Cost of Solution: A single 7100 Series appliance can monitor up to eight network segments or VLANs. The Symantec Network Security 7100 Series reduces the cost of a network security solution by enhancing the security and reliability of the hardware, simplifying deployment and management, and providing a single point of service and support. ■ Flexible Licensing Options: Each model of the Symantec Network Security 7100 Series offers licensing at multiple bandwidth levels. Whether you