ThreatSentry is a Host IPS/Application Firewall that secures IIS from both familiar and unconventional threats. By leveraging an ISAPI filter in MMC, it compares server requests to a knowledgebase and evolving system baseline, quickly flagging and blocking dangerous activity.
ThreatSentry is an advanced Host Intrusion Prevention software application that provides complete protection to Windows Web servers that run Microsoft Internet Information Services (IIS). It offers multi-layered protection by using two core components – an Application Firewall and a Behavioral Engine.
The Application Firewall is pre-configured with a knowledgebase that includes known exploitive techniques and attack characteristics, allowing administrators to establish explicit guidelines for permitted and prohibited activity. The Behavioral Engine organizes server requests into a multidimensional baseline of typical system activity, allowing it to scrutinize each server connection against the rule-set configured in the application firewall and behavioral baseline, identifying and taking action against any activity that falls outside the trusted parameters.
ThreatSentry's intrusion prevention capabilities improve progressively as the baseline evolves, either automatically or based on input from the system administrator. IIS servers are protected from an array of vulnerabilities including Directory Traversal, Parameter Manipulation, Buffer Overflow, Parser Evasion, High-bit Shellcode, Printer Protocol, Remote Data Services, and others. This makes it virtually impossible for known and new, internal and external threats to affect the system.
The software is exceptionally easy to use and affordably priced for enterprises of any size. It also offers logging, reporting, and audit features, allowing administrators to review, sort, manage, or export Security Alerts and Training Events, as well as track and audit reclassified events. The central console for multi-server management is another key feature of ThreatSentry, giving administrators complete centralized network management.
ThreatSentry's Security Alerts can be transmitted via email, pager, and/or cellular phone, and it also offers a fully integrated Firewall that blocks all network ports for IPs listed in the Blocked List. With its unbeatable combination of features and affordability, ThreatSentry is undoubtedly a must-have for anyone seeking to protect their Windows Web servers running Microsoft IIS.
The Application Firewall is pre-configured with a knowledgebase that includes known exploitive techniques and attack characteristics, allowing administrators to establish explicit guidelines for permitted and prohibited activity. The Behavioral Engine organizes server requests into a multidimensional baseline of typical system activity, allowing it to scrutinize each server connection against the rule-set configured in the application firewall and behavioral baseline, identifying and taking action against any activity that falls outside the trusted parameters.
ThreatSentry's intrusion prevention capabilities improve progressively as the baseline evolves, either automatically or based on input from the system administrator. IIS servers are protected from an array of vulnerabilities including Directory Traversal, Parameter Manipulation, Buffer Overflow, Parser Evasion, High-bit Shellcode, Printer Protocol, Remote Data Services, and others. This makes it virtually impossible for known and new, internal and external threats to affect the system.
The software is exceptionally easy to use and affordably priced for enterprises of any size. It also offers logging, reporting, and audit features, allowing administrators to review, sort, manage, or export Security Alerts and Training Events, as well as track and audit reclassified events. The central console for multi-server management is another key feature of ThreatSentry, giving administrators complete centralized network management.
ThreatSentry's Security Alerts can be transmitted via email, pager, and/or cellular phone, and it also offers a fully integrated Firewall that blocks all network ports for IPs listed in the Blocked List. With its unbeatable combination of features and affordability, ThreatSentry is undoubtedly a must-have for anyone seeking to protect their Windows Web servers running Microsoft IIS.
What's New
Version 3.0: N/A
Version 2.0: N/A