Intrusion Releases Next Generation Upgrades for SecureNet Network IDS System

RICHARDSON, Texas–(BUSINESS WIRE)–April 1, 2003– Intrusion SecureNet System Leads the Market in Usability, Manageability and Performance with SecureNet Provider 2.1, SecureNet WBI 1.4 and SecureNet Sensor 4.5

Furthering the commitment of providing enterprises and governments with the only common criteria certified, best of breed network intrusion detection, Intrusion Inc. (Nasdaq:INTZ), a leading provider of intrusion detection solutions for the information-driven economy, today announced the release of SecureNet Provider 2.1, SecureNet WBI 1.4 and SecureNet Sensor 4.5. This combination of user interface and sensor improvements provides the intrusion detection user greater detection ability, more powerful data mining and a broader range of deployment options.

“These releases are the culmination of many customer focused initiatives to make the Intrusion SecureNet System the most usable, deployable and powerful network intrusion detection system,” said Ryon Packer, vice president of product management, business development and marketing for Intrusion Inc. “SecureNet WBI makes single tier deployments plug-and-play, SecureNet Provider is the preeminent enterprise intrusion detection data mining suite, and both interfaces take full advantage of the now, even more capable Intrusion SecureNet Sensor. Together, these improvements make the Intrusion SecureNet System the best overall solution for most network IDS deployments.”

Intrusion SecureNet Provider 2.1 is the latest release and gives the end user a three-tier management platform capable of data mining tens of millions of IDS events:

— SecureNet Provider matches the workflow of the IDS analysts with the existing Monitoring interface for real time correlation, the new Forensics module for analysis over time and collaboration between analysts, and the greatly expanded and improved Reporting module for decision support.

— New Forensics module provides a near-zero learning curve interface that is capable of indexing, summarizing and filtering tens-of-millions of IDS events.

— New Event Details and DNS Lookup right from the Forensics event view — shift-click or control-click to see the details or DNS of multiple events. Event details are HTML so the user can print or save the files for collaboration.

— New Case Files in the Forensics module allow the IDS analyst to drag-and-drop discrete events into logical case files for follow-up, long-term research and collaboration with other security professionals. Each case file has a note field capable of hyper linking URLs and network locations for easy tracking.

— Improved Reporting expands standard report templates and introduces innovative and customizable drill-down and summary reports that use Microsoft Excel pivot tables and graphing capabilities for simple decision support materials that can be copy/pasted into Microsoft(R) PowerPoint(R) and Word.

Intrusion SecureNet Provider also includes SecureNet Policy Editor for the creation and tuning of signature policies and Nexus for centralized management and deployment of SecureNet software, OS software and policies.

Intrusion SecureNet WBI 1.4 single-tier web browser interface brings standalone NIDS deployments to a new “plug-and-protect” level and simplifies Sensor management for SecureNet Provider users.

— New configuration interface separates basic and advanced configuration options with “on-screen” help that explains functions, gives warnings and shows input samples.

— New usability enhancements make it easier to find information about attacks, tune the Policy and adjust the setting of the sensor for varying performance levels.

— New comprehensive configuration of the Sensor Global Filters that allow pre-signature filtering of traffic for basic load balancing, IP or MAC filtering so the Sensor can be configured to examine only the traffic you want it to.

— New Event Filters are post-signature processing filters that allow complete configuration of when you want to be told about an event or not.

Intrusion SecureNet Sensor 4.5 is big jump in capability and performance for Intrusion’s market leading Sensor with revolutionary “unbuffered protocol decoding” technology.

— Revolutionary unbuffered protocol decoding technology provides the features of more thorough and broader detection with Gigabit performance.

— Gigabit protocol decoding means less time and knowledge required for performance tuning in high throughput environments.

Pricing and Availability

The entire SecureNet family of product is available now from Intrusion Resellers and Distributors across the globe. Intrusion SecureNet Sensor 4.5 is available as software only or on any of the Intrusion SecureNet appliance based Sensors. Prices range from under $3,500 for hardware and software combined small-business systems to in the mid-twenties for the Common Criteria EAL2 certified Intrusion SecureNet CC 7345. All appliance based Sensors come with Intrusion SecureNet WBI at no additional charge.

Intrusion SecureNet Provider is also available now and priced per Sensor under management, freeing the enterprise to architect the system without additional cost for redundant or tiered management. Software for Windows 2000 Server is just over $1,000 per Sensor under management with a bundled Manager that includes license for 10 Sensors available.

About Intrusion Inc.

Intrusion Inc. is a leading global provider of intrusion detection and security solutions for the information-driven economy. Intrusion’s suite of security products for governments and enterprises help protect critical information assets by quickly detecting, analyzing and responding to network- and host-based attacks. The company’s products include the Intrusion SecureNet(TM) line of leading network intrusion detection and the Intrusion PDS(TM) security appliances for Check Point Software Technologies’ market-leading VPN-1(R)/FireWall-1(R). For more information, please visit

Don't miss