IPS by Palo Alto Networks: Best-of-Breed Threat Block Rate
Why Choose Palo Alto Networks for IPS
Palo Alto Networks provides customers with the best intrusion prevention option in the industry based on effectiveness, performance and usability as verified in the recent IPS test performed by NSS Labs. NSS Labs tested the Palo Alto Networks solution against 1,179 live exploits in what was the industry's most comprehensive IPS test to date. The system was tested with a wide variety of traffic that varied by payload size, protocol, attack target and end-user delay time to ensure a reliable, real-world test bed.
Industry Leading IPS Effectiveness
The results of the NSS tests referenced above found that Palo Alto Networks accurately detected and blocked 93.4% of all of the 1,179 attacks, putting Palo Alto Networks easily in the uppermost echelon of IPS solutions based on core functionality. Tests included all types of attack methodologies, applications and targets. As a reference, the 2009 IPS group test found IPS block rates ranging from 17% to 89%.
Performance and Scalability
IPS systems are notoriously prone to degrading network performance in direct relation to the number of signatures that are enabled on the system, which almost invariably leads to a conflict between the security and network operations teams. In NSS lab tests, Palo Alto Networks delivered an industry-best 93.4% block rate, while maintaining 15% over stated datasheet IPS performance for the appliance.
93.4% Threat Block Rate at 2.3 Gbps
100% Resistance to IPS Evasion Techniques
15% Over Stated Performance
Complete the form below to download the full NSS Labs report.
