16233,9013545_DragonNetw_DS 5/28/04 12:17 PM Page 1 Dragon™ Network Sensor • High-speed network intrusion defense available via software or appliance • Protects at the network layer using signature-based pattern matching, protocol monitoring and anomaly detection techniques • Active Response features can terminate sessions and reconfigure firewalls, switches and routers • Open tunable signatures Powerful Network Intrusion Defense Dragon Network Sensor is centrally managed via Dragon Enterprise Managment — Implementation, modifi- A sophisticated software- and appliance- cation, and custom S e r v e r, which provides signature and based network intrusion defense system, creation of signatures to configuration updates, as well as reporting the Dragon Network Sensor identifies detect the attacks unique and event management, including misuse and attacks across the network. to each environment event description, source/destination IP, • Multi-interface monitoring Placed at network aggregation points, the source/destination port, offending packet, — Combines multiple network Dragon Network Sensor is unmatched in s e s s i o n (if configured), and timestamp. interfaces into a single detecting intrusions via signature, traffic stream, enabling Additional Dragon Appliances protocol, and anomaly-based techniques. dual-tap—without a D r a g o n ’s Integrated Network Sensor/ Application-based event detection switch detects non-signature-based attacks S e r v e r is an all-in-one solution for remote/ • IP defragmention and against commonly targeted applications branch offices that require a single system TCP/UDP stream reassembly for network-based intrusion detection, log i n c l u d i n g HTTP, RPC and FTP. These — Identifies attackers who multimethod detection techniques— aggregation, and local management/ attempt to evade an IDS by distributing attacks c o m b i n e d with an extensive, frequently monitoring. The Integrated Network over multiple packets updated signature database and false- Sensor/Server includes the Dragon • Protocol decoding Network Sensor for network monitoring; positive tuning capabilities—ensure that no intrusion goes undetected. Dragon Host Sensor for local protection, — Identifies attackers who hide an attack within an log aggregation and analysis; and Enterprise When an attack is detected, Dragon Network application protocol Management Server for local management, Sensor employs a variety of A c t i v e • IDS Denial of Service monitoring, and event processing. R e s p o n s e techniques to block the would- — Countermeasures defeat be intruder, including taking action to tools such as “stick” and stop the sessions and reconfiguring firewall “snort” policies or switch and router Access • Event sniping Control Lists. — Terminates an attack ses- sion via a TCP reset or Dragon Network Sensor offers m a r k e t - ICMP unreachable message leading deep forensics capabilities, • Dynamic reconfiguration including flexible packet capture, complete — Stops attacks through session reconstruction, and highly config- Checkpoint firewalls and urable Session VCR (collects all session blocks hackers on most information for services such as HTTP, commercial switches and FTP, POP and certain IPs or networks) routers that is needed to analyze network-based • Probe prevention attacks. — Defeats or confuses scanning techniques with false responses • Backdoor and rogue server detection Page 1 of 4 • Data Sheet 16233,9013545_DragonNetw_DS 5/28/04 12:17 PM Page 2 Specifications Technical Specifications Environmental Specifications FE100 Dragon Network Sensor Appliance Operating Temperature Performance rating: 100 Mbps +5º C to +35º C (41º F to 95º F) Architecture: Intel XEON (maximum change not to exceed +10º C) Memory: 512 MB, 20 GB IDE hard drive Non-Operating Temperature NICs: 2 10/100 copper, 1 10/100/1000 copper -40º C to +70º C (-40º F to 158º F) (ambient) Supports multi-interface monitoring Non-Operating Humidity GE250 Dragon Network Sensor Appliance 95% at 35º C (non-condensing) Performance rating: 250 Mbps Power Consumption Architecture: Dual Intel XEON Voltage Range: 4.96 Amp at 115V Memory: 512 MB, 36 GB SCSI hard drive Voltage Range: 2.48 Amp at 220V NICs: 3 10/100/1000 copper Supports multi-interface monitoring Agency and Standards Specifications GE500 Dragon Network Sensor Appliance Performance rating: 500 Mbps Safety Architecture: Dual Intel XEON Argentina: IRAM Certificate Memory: 1,024 MB, 36 GB SCSI hard drive Australia/New Zealand: ACA/MED (FE100 only) NICs: 2 10/100/1000 copper, plus 2 Gigabit fiber or 2 Belarus: Bellis Certificate (FE100 only) Gigabit copper NIC configuration Canada: UL 60950 – CSA 60950 (UL and cUL) Supports multi-interface monitoring China: CNCA (FE100 only), GB4943 (CCC certification) Europe/CE Mark: EN60950 (complies with 73/23/EEC) Physical Specifications Germany: GS License International: IEC60950 (CB Report and Certificate) Form Factor Nordic Countries: EMKO – TSE (74-SEC) 207/94 1U rack-mount server chassis for EIA standard 310-D racks (excluding FE100) Russia: GOST 50377-92 Dimensions U.S.: UL60950 – CSA 60950 (UL and cUL) 4.32 cm (1.7") H X 42.9 cm (16.9") W X 58.42 cm (23") D (FE100 only) Electromagnetic Compatibility (EMC) (Class A) 4.32 cm (1.7") H X 42.9 cm (16.9") W X 60.71cm Australia/New Zealand: AS/NZS 3548 (based on CISPR 22) (23.9") D Canada: ICES-003 China:GB 9254 and GB 17625 (CCC certification) Front Panel (Buttons) Europe/CE Mark: EN55022, EN55024 and Power on/off button, system-reset button, ACPI sleep EN61000-3-2;-3-3 (complies with 89/336/EEC) switch system ID button, and tool-activated NMI switch International: CISPR 22 (FE100 only) Japan: VCCI Korea: RRL, MIC 1997-41 and 1997-42 Front Panel (LEDs) Russia: GOST 29216-91 and 50628-95 Power, hard drive activity, network activity (two), and Taiwan: CNS13438 (excluding FE100), BSMI RPC general system fault (FE 100 only) U.S.: FCC, Part 15 Page 2 of 4 • Data Sheet 16233,9013545_DragonNetw_DS 5/28/04 12:17 PM Page 3 Ordering Information Network Sensor Appliance DSNSA-FE100-TX Dragon FE100 Network Sensor Appliance for the small/branch office DSNSA-GE250-TX Dragon GE250 Network Sensor Appliance for the regional office, small data center (copper network interface card) DSNSA-GE250-SX Dragon GE250 Network Sensor Appliance for the regional office, small data center (fiber network interface card) DSNSA-GE500-SX Dragon GE500 Network Sensor Appliance for the data center (fiber network interface card) DSNSA-GE500-TX Dragon GE500 Network Sensor Appliance for the data center (copper Gigabit network interface card) Sensor/Management Appliances DSISA2-TX INS2 Integrated Network Sensor/Server (copper network interface card) DSISA2-SX INS2 Integrated Network Sensor/Server (fiber network interface card) Page 3 of 4 • Data Sheet 16233,9013545_DragonNetw_DS 5/28/04 12:17 PM Page 4 Warranty As a customer-centric company, Enterasys is committed to providing the best possible workmanship and design in our product set. The Dragon product family includes a ninety (90) day warranty for software that covers defects in media only, and a one (1) year warranty for hardware. Service and Support Enterasys understands that superior service and support is ™ a critical component of Networks that Know. The Enterasys SupportNet Portfolio—a suite of innovative and flexible service and support offerings—completes the Enterasys solution. SupportNet offers all the post-imple- mentation support services you need—online, onsite or over the phone—to maintain your network availability and performance. Additional Information For more information about Enterasys Dragon, visit the web at http://www.enterasys.com/products/ids Contact Information Contact Enterasys Sales at 877-801-7082 or e n t e r a s y s . c o m / c o r p o r a t e / c o n t a c t / c o n t a c t - s a l e s . h t m l Enterasys Networks Corporate Headquarters 50 Minuteman Road Andover, MA 01810 U.S.A Dragon is a re g i s t e red trademark of Enterasys Networks. All other products or serv- ices mentioned are identified by the trademarks or service marks of their respective companies or organizations. NOTE: Enterasys Networks reserves the right to change specifications without notice. Please contact your representative to confirm current specifications. All contents are copyright © 2004 Enterasys Networks, Inc. All rights re s e r v e d . Lit. #9013545 3/04 Page 4 of 4 • Data Sheet