WIXLIB

FIREEYE NETWORKSECURITYNETWORK SECURITY THAT COMBATS WEB-BASED CYBER ATTACKSHIGHLIGHTS Detects advanced and zero-day attacks witha patented, signature-less MVX engine Prevents future attacks by applyingmachine learning, and retrospective andweak-signal analysis Identifies common and known attacks withtraditional, signature-based IPS technology Fights blended attacks across web and emailthreat vectors Facilitates quick containment of advancedNX 2400, NX 4420, NX 7420, NX 10000 (not pictured: NX 1400, NX 4400, NX 7400, NX 10550)threats with actionable, contextual intelligence Improves operational effectiveness with a low,false-positive rate and alert categorization Configures for high availability andOV E R V I E Wautomatic failover ensuring continuousthreat prevention and detectionThe FireEye Network Security identifies and blocks zero-day exploits,droppers (binaries), and multi-protocol callbacks to help organizationsscale their advanced threat defenses across a range of deployments,from the multi-gigabit headquarters down to remote, branch and homeoffices. FireEye Network Security with FireEye Intrusion PreventionSystem (IPS) technology further optimizes spend, substantially reducesfalse positives and enables compliance while driving security acrossknown and unknown threats.Cyber criminals use the Web as a primary threat vector to deliver zeroday exploits and malicious URLs contained in email and to exfiltratedata. Network Security is designed to stop drive-by downloads andblended Web and email attacks. In addition, Network Security offers adefense against infections that take place outside the network.DATA S H E E T Protects entire organization by supportingmixed environments with Windows andOS X users Disrupts attacks in real time with in-lineblocking at up to 4 Gbps throughput for upto 40,000 users Simplifies management with low-touchdeployment and a high degree of automation

Real-time threat prevention blocksWeb-based attacksNetwork Security can be deployedin-line at Internet egress points toblock Web exploits and outboundmulti-protocol callbacks. Utilizing theFireEye Multi-vector Virtual Execution (MVX) engine, Network Securityconfirms zero-day attacks, createsreal-time threat intelligence, andcaptures dynamic callback destinations.In monitor mode, it signals incidentresponse mechanisms. In out-ofband prevention mode, NetworkSecurity issues TCP resets for out-ofband blocking of TCP, UDP or HTTPconnections.callback channels, dynamically createsblocking rules and transmits thisinformation back to Network Security.YARA-based rules enablecustomizationWith support for custom YARA rules,security analysts can specify which Webobjects should be analyzed for threats.Streamlined incident prioritizationWith the FireEye Antivirus-Suite,each malicious object can be furtheranalyzed to determine whetherantivirus-generated alerts are reliable.This enables customers to moreefficiently prioritize incident response.Fights blended attacks across Weband email threat vectorsThe FireEye Platform protects againstblended, advanced attacks that useWeb, spear-phishing emails and zeroday exploits. With FireEye NetworkSecurity, Email Security and CentralManagement, customers get real-timeprotection against malicious URLs andthe ability to connect the dots of ablended attack.To maintain strong security and keeporganizations running smoothlywithout interruption or lag, NetworkSecurity supports integration with theFireEye Active Fail Open (AFO) switchto ensure no link downtime. It alsodrives continued availability for in-linehardware deployments in the face ofpower or link failures. In addition, highavailability provides redundancy andan automatic failover for deploymentsin either in-line active or monitoring(passive) mode. This ensures thecontinuity of threat prevention anddetection if a hardware or softwarefailure occurs.IPS supportDynamic threat intelligence sharingThe resulting dynamically generated,real-time threat intelligence producedby Network Security helps all FireEyeproducts protect the local network.This intelligence includes callbackcoordinates and communicationcharacteristics which can be sharedglobally through the FireEye DynamicThreat Intelligence cloud to notify allsubscribers of new threats.Protects against unknown, zero-dayattacksNetwork Security uses the signatureless MVX engine which executessuspicious binaries and Web objectsagainst a range of browsers, plugins, applications and operatingenvironments that track vulnerabilityexploitation, memory corruption andother malicious actions. As the attackplays out, the MVX engine capturesComprehensive and real-timeprotectionNo rules tuning and near-zero falsepositivesNetwork Security with IPS consolidatesadvanced threat prevention withtraditional security to optimizespend. It automates alert validation,leveraging the power of MVX toreduce false alerts and illuminatesattacks hidden within the noise todrive down operational expenditureand reduce the business exposure ofmissed incidents. Network Securitycomplements the signature-lesssecurity provided by MVX with thesignature based security of thetraditional IPS technology to augmentsecurity and enable compliance.Network Security is an easy-tomanage, clientless platform thatdeploys in under 60 minutes andrequires absolutely no tuning. It offersflexible deployment modes includingout-of-band via a TAP/SPAN, in-linemonitoring or in-line active blocking.DATA S H E E T / F I R E E Y E N E T W O R K S E C U R I T Y2

T E C H N I C A L S P E C I F I C AT I O N SNX 900NX 1400NX 2400NX 4400/4420NX 7400/7420NX 7500NX 9450NX 10000NX 10450NX10550User Count501005001,000 or 2,50010,00010,00020,00040,00040,00040,000OS dowsWindowsWindowsWindowsWindowsWindowsMac OS XWindowsWindowsWindowsWindowsMac OS XPerformance *Up to 10 MbpsUp to 20 MbpsUp to 50 Mbps100 Mbps or 250MbpsUp to 1 GbpsUp to 1 GbpsUp to 2 GbpsUp to 4 GbpsUp to 4 GbpsUp to 4GbpsNetworkMonitoring Ports2x 10/100/1000BASE- T Ports2x 10/100/1000BASE- T Ports4x 10/100/1000BASE- T Ports4400: 4x 10/100/1000 BASE- TPorts4420: 4x 1000BASE-SX FiberOptic Ports (LCMultimode)7400: 4x 10/100/1000 BASE- TPorts7420: 4x 1000BASE-SX FiberOptic Ports (LCMultimode)4x 10/100/1000BASE- T Ports4x SFP ,4xSFP ports,1000baseSX(LC MMF),1000baseLX (LC,SMF), 1000baseT(RJ45, UTP5)2x 10GBASE SR/SW 850nmFixed interfaces:10GbaseSX(LC MMF)8 x SFP (4 x1000base and4 x 10Gbase),1000baseSX/10GbaseSR(LC, MMF),1000baseLX/10GbaseLR (LCSMF), 1000baseT(RJ45, UTP5),10GbaseCu (5mdirect-attachedcable)8 x SFP (4 x1000base and 4 x10Gbase),1000baseSX/10GbaseSR(LC, MMF),1000baseLX/10GbaseLR (LC,SMF), 1000baseT(RJ45, UTP5),10GbaseCu (5mdirect-attachedcable)High Availability(HA)Not AvailableNot AvailableNot AvailableNot AvailableNot AvailableNot AvailableActive-Passive HANot AvailableActive-Passive HAActive-Passive HANetworkPorts Mode ofOperationIn-line Monitor,Fail-Open, FailClose, or Tap/Span, HW BypassIn-line Monitor,Fail-Open, FailClose, or Tap/Span, HW BypassIn-line Monitor,Fail-Open, FailClose, or Tap/Span, HW BypassIn-line Monitor,Fail-Open, FailClose, or Tap/Span, HW BypassIn-line Monitor,Fail-Open, FailClose, or Tap/Span, HW BypassIn-line Monitor,Fail-Open, FailClose, or Tap/Span, HWIn-line Monitor, orTap/SpanIn-line Monitor,Fail-Open, FailClose, or Tap/Span, HW BypassIn-line Monitor, orTap/SpanIn-line Monitor orTap/SpanHigh Availability(HA) Ports (rearpanel)Not AvailableNot AvailableNot AvailableNot AvailableNot AvailableNot Available2x 100/1000/10GBase-T PortsNot Available2x 100/1000/10GBase-T Ports2x 100/1000/10GBase-T PortsManagementPorts (rear panel)2x 10/100/1000BASE-T Ports2x 10/100/1000BASE- T Ports2x 10/100/1000BASE- T Ports2x 10/100/1000BASE- T Ports2x 10/100/1000BASE- T Ports2x 10/100/1000BASE- T Ports2x 10/100/1000BASE- T Ports2x 10/100/1000BASE- T Ports2x 10/100/1000BASE- T Ports2x 10/100/1000Base-T PortsIPMI Port dIncludedIncludedIncludedIncludedIncludedFront LCD &KeypadNot ncludedIncludedIncludedIncludedPS/2 Keyboard andMouse, DB15 VGAPorts (rear uded (no PS/2Keyboard andMouse)IncludedIncludedIncludedIncluded(no PS/2Keyboard andMouse)USB Ports (rearpanel)2x Type A USBPorts2x Type A USBPorts2x Type A USBPorts2x Type A USBPorts2x Type A USBPorts4x Type A USBPorts2x Type A USBPorts2x Type A USBPorts2x Type A USBPorts2x Type A USBPortsSerial Port (rearpanel)115,200 bps, NoParity, 8 Bits, 1Stop Bit115,200 bps, NoParity, 8 Bits, 1Stop Bit115,200 bps, NoParity, 8 Bits, 1Stop Bit115,200 bps, NoParity, 8 Bits, 1Stop Bit115,200 bps, NoParity, 8 Bits, 1Stop Bit115,200 bps, NoParity, 8 Bits, 1Stop115,200 bps, NoParity, 8 Bits, 1Stop Bit115,200 bps, NoParity, 8 Bits, 1Stop Bit115,200 bps, NoParity, 8 Bits, 1Stop Bit115,200 bps, NoParity, 8 bits, 1Stop BitDrive CapacitySingle 500 GBHDD, Internal,fixedSingle 500 GBHDD, Internal,fixedSingle 500 GBHDD, Internal,fixed2x 600 GB HDD,RAID 1, 2.5 inch,FRU2x 600 GB HDD,RAID 1, 2.5 inch,FRU4x 900 GB HDD,RAID 10, 2.5 inch,FRU4x 900 GB HDD,RAID 10, 2.5 inch,FRU2x 800 GB SSD,RAID 1, 2.5 inch,FRU4x 800 GB SSD,RAID 10, 2.5 inch,FRU4 x 960GB SSD,RAID 10, 2.5 inch,FRUDATA S H E E T / F I R E E Y E N E T W O R K S E C U R I T Y3