Security Testing and Evaluation Labs
Security Evaluation Laboratory (SEL)
Nokia: Nokia Intrusion Prevention with Sourcefire v4.8
| Sponsor: | Nokia |
| Point of Contact: | Jeff Ward Phone: (781)993-4679 |
| Assurance Level: | EAL2+ (with BRPP) |
| Status: | Pre-Evaluation |
Nokia IPS monitors a customer’s network for traffic that could affect the availability, integrity, and confidentiality of a host and its data. By placing 3D Sensors on key network segments, the packets that traverse the network can be examined for malicious activity. The TOE allows administrators to monitor the network for attacks that might affect the availability, integrity, or confidentiality of hosts on the network through a central Defense Center. The Intrusion Prevention System (also called IPS) is one of the components of the Sourcefire 3D Sensor on Nokia software that can be run on the 3D Sensors. Each 3D Sensor with IPS uses rules, decoders, and preprocessors to look for the broad range of exploits that attackers have developed. The 3D Sensors with IPS allow Nokia IPS to be used as an intrusion detection system and/or an intrusion prevention system.