8 NX-Platform Hardware Installation and Safety
TippingPoint Intrusion Prevention Systems are optimized to provide high resiliency, and high-availability
security for remote branch offices, small-to-medium and large enterprises and collocation facilities. Each IPS
can protect network segments from both external and internal attacks.
Multiple TippingPoint devices can be deployed to extend this unsurpassed protection to hundreds of
enterprise zones. You can monitor and manage the devices by using the local client available on each device,
or by using the SMS client to monitor and manage well over a hundred devices. The TippingPoint N-
Platform and NX-Platform devices support IPv6, tunneling (including GRE and multi-layer tunnels), and
inspection bypass rules for trusted traffic.
IPS local clients
The TippingPoint System provides various points of interaction, management, and configuration of the IPS.
The clients include graphical user interfaces (GUI) and command line interfaces (CLI). These clients include
the following:
• Local Security Manager (LSM) — Web-based GUI for managing one IPS device. The LSM provides
HTTP and HTTPS (secure management) access. This access requires access from a supported web
browser (Internet Explorer, Mozilla Firefox, and Netscape). Using the LSM, you have a graphical display
for reviewing, searching, and modifying settings. The GUI interface also provides reports to monitor the
device traffic, triggered filters, and packet statistics.
• Command Line Interface (CLI) — Command line interface for reviewing and modifying settings on
the device. The CLI is accessible through Telnet and SSH (secure access).
• LCD Panel — Several IPS TippingPoint devices provide an LCD panel to view, configure, and modify
some device settings.
Core Controller
The TippingPoint Core Controller is a hardware-based device that enables inspection of up to 20Gbps of
traffic by sending the traffic to as many as 24 IPS device segments.
The Core Controller can control traffic across its three 10GbE network segment pairs and across multiple
TippingPoint E-Series IPS devices. IPS devices are connected by 1GbE uplinks, and each packet that is
received on a 10GbE Core Controller interface passes through a load balancer that then determines the IPS
connection to use for transmitting the packet.
The Core Controller provides:
• 10GbE bidirectional traffic inspection and policy enforcement
• High Availability with an optional Smart ZPHA module
• Central management through the SMS
To Next Page
Loading...
