Secure Associates Intrusion Detection System (SA-IDS) provides a layer of defense, which monitors network traffic for predefined suspicious activities & patterns, and alerts system administrators when potential hostile traffic is detected.

SA-IDS is capable of performing real-time traffic analysis and packet logging on IP networks. SA-IDS can perform protocol analysis, content searching/matching and detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more.

SA-IDS utilizes rules-based detection engine that can be configured to detect both signature-based events for known and unknown security threats. Rules are used to scan packets at the IP protocol and the application to look for any attacks against the protocol. Out-of-the-box, SA-IDS includes over 2000 rule signatures. SA-IDS provides ease of use graphical user interface that allows customers to easy create their own rules and added to the rule-set on individual or groups of sensors.

Key Features and Benefits