What's new in the Cisco IDS range:

1. IDS 4215 Sensor
   The Cisco IDS 4215 Appliance sensor delivers to branch and remote office customers 80 Mbps of intrusion protection at a price point that sets a new price/performance mark. With the support of multiple interfaces, the 4215 delivers 5 sensors in a single 1 RU appliance. The IDS 4215 is shipped with version 4.1 Sensor software that contains enhanced embedded web-based device management, enhanced forensics capabilities, and the inclusion of P2P signatures that detect the violation of corporate policy through the use of file sharing tools.
2. IDS Network Module for Cisco 2600XM, 3660, 3700 series
   The Cisco IDS Network Module for the Cisco 2600XM, 3660, and 3700 series routers is a router-integrated line card that delivers 45 Mbps of intrusion protection. Through collaboration with IPsec VPN and Generic Routing Encapsulation (GRE) traffic, this module can allow decryption, tunnel termination and traffic inspection at the first point of entry into the network - an industry first. This network module is also shipped with version 4.1 Sensor software and works in concert with other IDS components including Cisco IDS Management Console, Cisco Works VPN/Security Management Solution and Cisco IDS Device Manager, further reducing operational costs and management complexity.
3. Cisco Security Agents v4.0
   The Cisco Security Agent provides day zero desktop and server protection from network attacks by inspecting operations on the desktop or server and looking for anomalous behavior between applications and the operating system for sophisticated threat protection. In addition, CSA now has augmented Web server protection, is integrated into CiscoWorks VMS and interoperates with Cisco VPN client to provide AYT (Are you There) functionality.
4. Cisco CSS 11501S and WebNS v7.2 SSL s/w
   The Cisco CSS 11500 Series Content Services Switch is a compact platform that delivers rich Layer 4-7 traffic management services for e-business applications. The Cisco CSS 11501 and Cisco CSS 11501 with SSL termination are both one-rack unit fixed-configuration models appropriate for small data-center applications. Both support eight 10/100 Ethernet ports and one Gigabit Ethernet port.
5. Cisco ACNS Software version 5.0.3 with Websense Content Filtering On-Box
   In prior releases, Cisco ACNS software has been integrated with the Websense content filtering solution as a two-device off-box solution. Cisco ACNS v5.0.3 allows the Websense application to run on the Cisco Content Engine 7305 and Content Engine 7325 as an on-box solution. Both the Websense v 4.4 server and client are now integrated on the content engine. This feature is only available for the Cisco Content Engine 7305 and Content Engine 7325 at this time.
6. Cisco IDS 4250-XL Sensor Appliance
   At 1,000 Mbps, the Cisco IDS 4250-XL provides unprecedented performance by providing customized hardware acceleration to protect fully saturated gigabit links, as well as multiple partially utilized gigabit subnets. It can also be used to protect gigabit subnets and traffic traversing switches, as well as providing the flexibility to accommodate a simple hardware upgrade that scales to full line-rate gigabit performance. All IDS sensors and services modules support the latest IDS software v. 4.0, which provides extensive analysis and protection against network threats. Customers can easily administer IDS sensors and modules and monitor network threats via the IDS Device Manager and IDS Event Viewer software v. 4.0 included at no charge.
7. Cisco IDS Service Module 2 (IDSM-2)
   A second-generation IDS service module for the Cat 6500 series, Cisco IDSM-2 provides 600Mbps of performance. The IDSM-2 works by inspecting packets traversing customer networks and comparing them to pre-assigned signatures--searching for patterns consistent with known network attacks. If an attack is detected, the IDSM-2 will then alert managers and take preventative actions, offering a wide array of responses that includes the ability to dynamically modify ACLs on firewalls, routers, and switches.
8. Cisco Threat Response Technology
   Cisco Threat Response works with Cisco Network IDS to virtually eliminate false alarms, escalate real attacks, and aid in the remediation of costly intrusions. Unlike other intrusion-management solutions, this technology provides an automated, just-in-time analysis of each targeted host to determine whether a compromise has actually occurred. The automated, real-time capabilities of this technology help protect your network environment around the clock.
9. Cisco Security Agent (Okena StormWatch)
   The Cisco Security Agent provides host Intrusion Prevention, Distributed Firewall, malicious mobile code protection, Operating System integrity assurance, and audit log consolidation all with a single agent. It goes beyond conventional host/desktop security solutions by identifying and preventing malicious behavior before it can occur, thereby removing potential known and unknown security risks.
10. Enhancements to Cisco IOS¨ Intrusion Detection System (IDS) Software:
    Improvements have been made to the IDS signature scanning engine as well as the addition of 42 high severity type of HTTP, DNS, UDP and other types of statically defined malicious signatures. Because the IOS IDS is inline, it secures the network from DoS attacks originating from both inside and outside the network by way of sophisticated attack behavior detection.
11. Security Modules for Catalyst Switches
    The powerful new Catalyst 6500 and its security service modules - Firewall, IPSec VPN, IDS, Network Analysis and SSL - offer unparalleled security performance.