One Strata Guard® box monitors up to four network segments, simplifying administration and squeezing every drop out of your IDS/IPS investment. Depending on your architecture, a single implementation can simultaneously monitor connections to your DMZ, public web servers, financial systems, and wireless and remote segments.

And all segments are managed through a single management console. Common configuration, administration, and reporting activities are applied universally across all segments, while segment-specific activities and monitoring can be customized to reflect prevailing traffic patterns.

Minimal administration and improved security with segment-specific tuning
Strata Guard lets you customize the intrusion detection/prevention security polices applied to each monitored segment.

For example, in the policy that monitors your email connection, you would disable all non-email-specific rules. The advantages are substantial. From a performance perspective, you're not applying the entire rule set to the traffic stream. Second, you eliminate false-positives generated by non-relevant attack rules. And third, you can be strict with your individual policies; you know exactly what types of traffic should—and shouldn't—be present.