EdgeIPS™

• L2/L3 Policy

– Customize your own security rules with a variety of user-defined conditions to best fit your industry.

• ICS Protocols

– Integrate the commonly-used ICS protocols with security rules to optimize the protection for your OT networks.

• Suspicious Objects

– Shield your network with customizable, real-time threat detection by recognizing the same IP/MAC addresses, protocols or port numbers with the pre-defined suspicious objects.

• DoS Prevention

– Define your thresholds for flood/scan attacks and block subsequent anomalous packets once an attack is detected to ensure uninterrupted service.

• Antivirus Protection (Exclusive to EdgeIPS Pro)

– Protect your network against the latest malware variants, spyware, and other content-level threats and reduce the risk of data breach or damage caused by malware infection.

• IPS Protection

– Defend legacy production networks and unpatched devices against known threats with up-to-date vulnerability filtering rules and virtual patching. 

• Network Segmentation

– Segment OT network to eliminate the spread of infections and ensure reliable network traffic. 

• System Visibility

– The streamlined system dashboard provides the operators with an overview of the security appliances and full control over the entire system. 

• Asset Visibility

– EdgeIPS provides a high-level overview of all connected assets in the production environment, for comprehensive visibility.  

• OT Traffic Visibility

– EdgeIPS presents all the traffic passing through, with real-time details such as bandwidth usage and traffic applications.  

• High Availability (Exclusive to EdgeIPS Pro)

– When a failover occurs on EdgeIPS Pro, the standby EdgeIPS Pro device will take over and become the active one.

• Hardware Bypass

– When a failover occurs on EdgeIPS, the port pairs can bypass the packets without impacting the connectivity. 

• Universal Bypass (Exclusive to EdgeIPS Pro)

– When a failover occurs on the switch where EdgeIPS Pro connects to, an alternative route to the standby switch will be activated through the neighbouring port.

• Centralized Management

– Use our central management system, EdgeOne, for security management in compliance with manufacturing SOP to centrally monitor operation information, update network protection policies, and set patterns for attack behaviors.

• Dual Operation Modes

– Flexibly switch between Monitor and Prevention modes, providing greater flexibility and ease of integration to preserve your productivity while maximizing security. 

• Easy Onboarding

– EdgeIPS’ hassle-free device onboarding process facilitates quick, effortless deployment of devices on a massive scale within the production network. 

• Baseline Rule Auto Generation

– Leverage the power of rule auto-learning to seamlessly transform your everyday network traffic into robust access policies, unleash effortless policy deployment, maintain firm control over your networks, and fortify your cyber-defenses, all at your fingertips.