Livermore Software Laboratories, Intl.

PORTUS Application Protection System

PORTUS APS Performance Brief (.pdf) Zero-Hour Defense for SMTP Whitepaper (.pdf version)

PORTUS APS Product Brief (.pdf) Protocol Anomaly Detection Whitepaper (.pdf)

PORTUS High Availability Whitepaper (pdf) PORTUS SMTP Application Defenses Whitepaper (pdf)

Analysis of High Availability Firewalls versus Firewall sandwich Configurations (.pdf)

Overview

The PORTUS Application Protection System (APS) functions as an in-line Network Intrusion Prevention System (NIPS) and firewall. PORTUS delivers in-depth protection against known and unknown forms of attack. Protocol Anomaly Detection (PAD) detects and blocks previously unknown forms of attack without the need for signatures while Stateful Signature Analysis (SSA) of the payload data allows detection and blocking of known attacks. Both PAD and SSA can be fine tuned to your unique applications, to provide the highest level of security without producing false alarms. The PORTUS APS is capable of stopping all forms of attack in real-time and preventing them from reaching your protected systems.

In addition to unequaled security PORTUS also provides content filtering, web caching, workload balancing, a fault-tolerant High Availability option and extensive report generation.

PORTUS provides unequaled scalability to meet the requirements of small, medium, large and ultra-large organizations. PORTUS is capable of multi-gigabit per second throughput, and can meet any desired performance or throughput requirements.

Zero-Hour Protection

PORTUS provides Zero-Hour protection, which means new forms of attack are blocked the instant they reach the PORTUS gateway. With PORTUS it is not necessary to wait days for the latest attack signatures to be identified and downloaded for use in an IDS.

Unequaled Security Record

PORTUS has been securing large organizations for more than eleven years and has undergone fifteen product releases. Today PORTUS is the only firewall that has been on the market for more than 10 years without being compromised. No vulnerabilities have ever been reported by CERT, BugTraq, SANS or the FBI's NIPC.

Why choose PORTUS?

PORTUS has been on the market for over eleven years, and is the only product of its kind to have achieved a perfect security record. Security is too crucial an issue to rely upon methods, technologies and products that have a history of being penetrated, and with known vulnerabilities in their code. Over the last eleven years PORTUS has proven over and over again that it is the most advanced and secure product of its kind in the world. PORTUS has undergone over fifteen revisions, and every new release of PORTUS has increased the security, reliability and stability of the product, all the while maintaining the highest levels of performance. Over the years PORTUS has proven that its technology is both FutureReady and capable of providing Zero-Hour(TM) protection, this is possible because more often than not PORTUS integrates protections against many forms of attacks years before they are first deployed.

More than a Firewall

PORTUS provides application level defenses that block thousands of application attacks that pass undetected through the best of the Stateful Packet Filters. Embedded intrusion prevention eliminates the need for intrusion detection software at the network boundary.

Unequaled Scalability and Performance

PORTUS provides unequaled performance and scalability and is limited by the I/O bandwidth of the hardware. Single systems can configured to deliver more than 8 gigabit per second throughput. Multiple systems can be clustered to provide even higher levels of performance.

Integrated High Availability (99.999%) Design

High Availability is integrated into PORTUS using fault tolerant hardware and software technology. This provides customers with a highly reliable product that detects, isolates and recovers from hardware and software errors on the fly.

Integrated Workload Balancing

Workload balancing allows the use of clustered servers to provide higher levels of throughput. PORTUS automatically detects a server failure and redirects traffic the remaining servers in the server pool. PORTUS automatically reschedules work to the server when it comes back online.

Architecture

Hybrid architecture provides maximum security and performance. Application specific proxies provide high levels of security and access control tailored for the application. The Application Program Interface (API) allows site specific extensions to the application proxy. This provides fine grain application control beyond the standard product. Stateful Packet Filters can also be employed for applications that do not require the same level of security. A circuit level proxy provides additional flexibility. This unprecedented flexibility allows the security administrator to configure the firewall to meet unique site requirements.

Key Benefits