Redborder Intrusion Probe

The redBorder IPS solution consists of a scenario made up of a series of devices called sensors and a central device called Manager. The sensors are Linux systems with their distribution completely focused on capturing and/or preventing intrusions into the network segments where they are located. Whenever a threat with a specific signature is recognised, the sensor will launch an alert and optionally block the communication, generating an event in the central system (manager). The manager is a Linux system with its distribution completely focused on receiving events sent to it from the sensors and on managing these events by inventorying the sensors and configuring security policies that will be applied to them (signature management, policies and pre-processors).