The Inquirer, a British web site that is ground zero for computer industry gossip - Austin American Statesman
NORWEGIAN AV vendor Norman said it has plans to release a hardware-based network appliance which scans traffic and blocks the content it deems dangerous.
The kit sits between network segments and scans traffic as it comes through, and snuffles it for any malware.
A spokesNorman said that the hardware does this all so fast that by the time the final pieces of a file transfer have been transmitted the kit has worked out whether it will be dangerious.
When the malware is found, the Norman gear blocks the final parts of the transfer, triggering a re-send request, which it also blocks. The traffic is scanned packet by packet and this stops any real delays.
PC World says the device will be unveiled at the RSA security conference this week in San Francisco. µ
L'INQ
PCWorld
Intrusion-prevention systems (IPS) are hardly new devices, nor is the worm hole routing. I take this device is aimed at the SOHO market?
IPS can be fairly annoying because it bins false positives, which leads to so things not working with no reason why.
I would properly prefer Fortinet...
By the way, can they really do it packet by packet? How could they know what's the 1st part of the code mean, when the next/last part of it still on the other side of the server?
I still prefer Fortinet... (even for home)
How does it deal with archives?
Can it detect signatures within before they are opened?
...Or password encrypted RAR Files...?
It's just an extra step that might decrease the likelihood, but will more than likely end up annoying more people than viruses it prevents...