New Wave Of Multifunction Security Appliances Hit Market

Internet Security Systems (ISS), a supplier of intrusion detection and vulnerability assessment software, dove into the appliance arena with the launch of its Proventia line of network security appliances.

Sun Microsystems teamed with Symantec to unveil the iForce Intrusion Detection Appliance.

And WatchGuard Technologies introduced the Firebox V200, a multigigabit firewall/VPN appliance.

Worldwide security appliance market revenue grew 15 percent to $355 million in the fourth quarter of 2002, according to research firm IDC. Firewall/VPN appliances led with 90 percent revenue share, but network intrusion detection showed 19 percent sequential growth.

ISS executives said the Proventia line will offer an increasing level of security and eliminate the need for multiple stand-alone products. "We believe there is a window of opportunity to provide a solution that will identify and block all threats on the network without user intervention," said Tim McCormick, vice president of marketing at Atlanta-based ISS.

The Proventia A Series is based on RealSecure intrusion-protection technology, while the Proventia B Series adds inline intrusion protection via RealSecure Guard. The Proventia C Series is a multifunction device that adds firewall protection, gateway antivirus and spam filtering. The devices are managed through the ISS SiteProtector system.

The Proventia A Series comes in four models and provides protection of up to 1,200-Mbps aggregate bandwidth on up to four network segments. Pricing starts at $9,995.

The B Series and C Series are slated for release in the third quarter and fourth quarter, respectively, and pricing is not yet available.

McCormick said ISS plans to sell the standard Intel-based, hardened Linux appliances through its direct-sales force and channel partners. The C Series will open huge opportunities in the midmarket, and the channel will play a key role there, he added.

With its multifunction appliance, ISS "is going head to head" with many security vendors that provide various security functions, said Jeff Bennett, president of SiegeWorks, a Pleasanton, Calif.-based security solution provider. Customers are beginning to ask for solutions that integrate multiple security functions, he said.

"But be careful what you wish for," Bennett said, adding that he hasn't yet seen a multifunction security appliance succeed on a large-scale basis.

Dan McCall, executive vice president of Guardent, a Waltham, Mass.-based managed security provider, said management is key for any multifunction device. "It's more about how well it can be managed, not how much you can stuff in a box," he said.

While appliances are a trend in security, the teaming of Sun and Symantec on the iForce IDS Appliance represents a trend of vendor collaboration, McCall said. The trend responds to growing interest in solution stacks as opposed to individual point products, he said.

The iForce device combines Sun's x86-based server running Solaris OS x86 Platform Edition with Symantec's ManHunt network-based intrusion-detection system, said Sanjay Sharma, security sector group manager of the market development organization at Sun. "It is a solution that is easier for the customer to deploy and manage. Customers that don't have technical expertise have a box that offers complete functionality."

Fred Klein, business development manager at Symantec, said the appliance was developed in part because of customer and channel partner demand for Symantec to enter the enterprise space.

Four models will be available by the end of the month and distributed through Arrow Electronics' MOCA division for a starting price of $21,995.

WatchGuard's Firebox V200 provides 2-Gbps firewall throughput, 1.1-Gbps VPN throughput and supports up to 40,000 VPN tunnels. It costs $60,000.

CHARLENE O'HANLON contributed to this story.