data sheet airdefense enterprise

HIGHLIGHTS•Providescomprehensivedetectionofwirelessintrusionattempts

•Respondsdynamicallytowirelessthreats

•Identifiesandautomaticallydisablesroguedevices

•Enablesdefinition,monitoring,andenforcementofWirelessLAN(WLAN)policies

•Helpsensuretimelyandefficientanalysisofsecurityincidents

•Utilizesinnovativeadd-onmodulestoprovideadvancedsecuritycapabilities

Rack-Mount Appliances for Advanced Enterprise WLAN Security

AirDefense®EnterpriseAppliancesforBrocade®MobilitysolutionsprovidethemostpowerfulwirelessIntrusionPreventionSystem(IPS)available.Scalingtomeettheneedsofthelargestglobalorganizations,theseappliancesprovidecompleteprotectionagainstwirelessthreats,policycompliancemonitoring,robustperformancemonitoringandtroubleshooting,andlocationtrackingcapabilities.

Thisinnovativeplatformcombinescollaborativeintelligencewithsecuresensorsthatworkintandemwithpurpose-builtserverappliancestomonitorall802.11(a/b/g)wirelesstrafficinrealtimeforthehighestlevelsofsecurity,roguemitigation,andpolicyenforcement.Threemodelsareavailable:

•AirDefense 1250 Appliance for Brocade Mobility:Packagedinarack-optimized1Uchassis,theAirDefense1250provides

AIRDEFENSEENTERPRISEAPPLIANCESFORBROCADEMOBILITY

CAMPUS NETWORK

DATASHEET www.brocade.com

250GBofstorageforsmallWLANdeployments.ItaccommodatesanIntelPentium43.4GHzProcessorand1GBofError-CorrectingCodeDDR2memorysupport.

•AirDefense 3650 Appliance for Brocade Mobility:Packagedinarack-optimized1Uchassis,theAirDefense3650provides250GBofstorageinRAID1configurationsformedium-sizetolargeWLANdeployments.ItaccommodatesanIntelCoreDuo2.13GHzProcessorand4GBofError-CorrectingCodeDDR2memorysupport.

•AirDefense 4250 Appliance for Brocade Mobility:Packagedina2Uchassis,theAirDefense4250provides500GBofstorageinRAID1configurationsandaredundantpowersupplyforlargetoverylargeWLANdeployments.ItaccommodatesanIntel2.33GHzXeon5140Dual-CoreProcessorand8GBoffullybufferedDDR2memorysupport.

COMPREHENSIVE INTRUSION DETECTIONAirDefenseEnterpriseAppliancesprovidetheindustry’smostcomprehensivedetectionofwirelessintrusionattempts.Byanalyzingexistingandday-zerothreatsinrealtimeagainsthistoricaldata,theycanaccuratelydetectallwirelessattacksandanomalousbehavior.Withcontext-awaredetection,correlation,andmultidimensionaldetectionengines,theydetectonlymeaningfulsecurityeventsandmaintainthelowestrateoffalse-positivealarms.Moreover,thisnext-generationwirelessprotectionplatformofferstheindustry’smostextensiveeventlibrary,withmorethan200securityandperformanceevents.

Theseappliancescanmitigatewirelessthreatsviatheairbydisablingwirelessconnectionsbetweenintrudersandauthorizeddevices—extremeprecisionensuresthatonlytheoffendingdeviceisprohibitedfromoperating.Inaddition,theappliancescanidentifythewiredswitchporttowhichoffendingdevicesareconnected,turningitofftopreventtheroguedevicefromaccessingthewirednetwork.

AUTOMATED PROTECTIONAirDefenseEnterpriseAppliancesrespondautomaticallytowirelessthreatsbystoppingthesuspectdevicebeforeitcandamagethenetwork.Byrespondingonbothwirelessandwirednetworks,theseappliancesprovidetheindustry’smostsecurewirelessintrusionpreventionsolution.Tohelpensurethatonlythecorrectintrudersandroguedevicesaredisconnected,theappliancesperformhighlytargetedterminations.Theyalsomaintainarecordofterminationactionstoenableareliableaudittrail.Inaddition,theappliancescomplywithFCCregulationsandhelpeliminatetheliabilitythatcouldbeassociatedwithstoppingadeviceinawirelessmanner.

STOP ROGUE DEVICES FROM CONNECTING TO THE NETWORKRoguedevicesareaseriousthreattoenterprisesecurity,andasinglerogueaccesspointcanallowanattackertogainfullaccesstotheinternalnetwork.To

preventthisfromhappening,AirDefenseEnterpriseAppliancescanidentifyanyroguedevicesanddisablethemautomaticallyiftheyareconnectedtotheinternalnetwork.

Byanalyzingwirelesstraffic,theycandeterminethelevelofthreatthatapotentialroguedeviceposestotheorganization.Thisapproachenablesorganizationstoignoreneighboringdevicesandfocusonlyontheroguesthatpresentaseriousthreat.Thisadvancedlevelofaccuracyisessential,becauseless-sophisticatedwirelessIPSsystemscaneasilydisableaneighboringaccesspointbymistake—exposingorganizationstounwantedliability.

COMPLY WITH ENTERPRISE AND REGULATORY POLICIESUsingAirDefenseEnterpriseAppliances,organizationscandefine,monitor,andenforceWLANpoliciesintheareasofsecurity,performance,usage,andvendortypes.Inaddition,theycanminimizevulnerabilitybyensuringthatwirelessdevicesareusingthepropersecurityprotocols.Whenadeviceisfoundtobenon-compliant,thesystemnotifiesadministratorsaboutthespecificdiscrepancy.

Thisflexibleplatformincludesavarietyofregulatorycompliancereportsforretailestablishments,healthcareorganizations,financialserviceproviders,andgovernmentagencies.TherearespecificcompliancereportsforthePaymentCardIndustry(PCI)standard,Sarbanes-Oxley(SOX),HIPAA,GLBA,andtheDepartmentofDefense8100.2Directive.Organizationscansimplyprinttheapplicablereportstodemonstratethewirelessnetwork’scompliance.

INVESTIGATE INCIDENTS WITH FORENSIC DATAAirDefenseEnterpriseAppliancesprovideforensicdatathathelpsorganizationsretraceanydevice’sstepsdowntotheminute.Withforensicresearch,investigatinganeventtakesminutesinsteadofpotentiallyhours.Moreover,casesthatnormallywouldhaverequiredadministratorstophysicallyvisitsitescannowbeinvestigatedremotely.

Organizationscanreviewminute-by-minuterecordsofconnectivityandcommunicationwiththenetwork.Bystoringmorethan325datapointsperwirelessdevice,perconnection,perminute,AirDefenseEnterpriseAppliancesenableorganizationstoviewmonthsofhistoricaldataonanywirelessdevicethatwasdiscoveredtobesuspicious.Theappliancesstoreimportantinformationsuchaschannelactivity,signalcharacteristics,deviceactivity,andtrafficflow—andtheycandisplaytimeofattack/breach,entrypointused,lengthofexposure,transfersofdata,andsystemscompromised.

TROUBLESHOOT NETWORK PERFORMANCEWithareal-timeviewofallWLANtraffic,AirDefenseEnterpriseAppliancesenableorganizationstoremotelytroubleshootproblems,identifyandrespondtonetworkmisconfiguration,andmonitornetworkavailability.TheappliancesanalyzetrafficflowtointerpretWLANperformanceandidentifyvaluableinformationsuchasusagecharacteristics,interferencefromneighboringWLANs,channeloverlap,andperformancedegradation.

Inaddition,theappliancescanhelpmeasurenetworkusageandperformancebydeterminingover-utilizedaccesspointsandchannels,pinpointingnetworkcongestion,andanalyzingutilizationandcongestiontrends.Organizationscandrilldownintoalivestreamingviewofdevices,BSSIDs,andchannelstoreviewitemssuchas:

•Remoteframecaptures

•Authenticationerrors

•Accesspointconfigurationissues

•Networkinterference

LOCATION TRACKINGPowerfullocationtrackingtechnologyenablesorganizationstominimizetheamountoftimerequiredtofindspecificdevices.Afterimportingimagesofafloorplanandspecifyingthecharacteristicsofthebuilding,organizationscanconsistentlylocatedeviceswithinfourcubicles.

Processor • IntelPentium43.4GHzProcessor• 2MBsharedL2cacheand800MHzFSB

Memory • 1GBRAM• ErrorCorrectingCodeDDR2

Harddrives • One250GB7200RPMSerialATAharddrive• High-reliabilitySeagateSV35Serieswith1,000,000hourMTBF

Communicationports • StackedPS/2portsforkeyboardandmouse• RJ45NICconnectorfor10/100/1000Mbconnections

• VideoconnectorBays SlimLineDVD/CD-ROMCertifications UL,cUL,CE,RoHS5/6Power • 250WPFCauto-rangingpowersupply

– Fullrange:100to240VACat47to63Hz• Steady-statecurrent:

– 6Amax.at115V– 3Amax.at230V

• Inrushcurrent(at25°C/77°Fambientcoldstart):– 65Amax.at110V– 130Amax.at220V

Dimensions • Serverappliancedimensions– 45mmH×419mmW×401mmD(1.8in.×16.5in.×15.8in.)

• Slidingrailkit:660mm(26in.)• Withpackaging:

– 254mmH×572mmW×737mmD(10.0in.×22.5in.×29.0in.)

Weight • Withoutpackaging:18kg(40lbs.)• Withpackaging:20kg(45lbs.)

Environmental • Operatingtemperature:10°Cto35°C(50°Fto95°F)withmaximumrateofchangenottoexceed10°C(50°F)perhour

• Non-operatingtemperature:–20°Cto70°C(–4°Fto158°F)

• Relativehumidity,non-operating:95%non-condensingat35°C(95°F)

• Systemcoolingrequirements:1660BTU/hourmax.

Processor • Intel2.13GHzCore2DuoProcessor• 2MBsharedL2cacheand1066MHzFSB

Memory • 4GBRAM• ErrorCorrectingCodeDDR2

Harddrives • Two250GB7200RPMSerialATAharddrives• High-reliabilitySeagateSV35Serieswith1,000,000hourMTBF

• RAID1configurationCommunicationports • StackedPS/2portsforkeyboardandmouse

• RJ45NICconnectorfor10/100/1000Mbconnections

• VideoconnectorBays SlimLineDVD/CD-ROMCertifications UL,cUL,CE,RoHS5/6Power • 250WPFCauto-rangingpowersupply

– Fullrange:100to240VACat47to63Hz• Steady-statecurrent:

– 6Amax.at115V– 3Amax.at230V

• Inrushcurrent(at25°C/77°Fambientcoldstart):– 65Amax.at110V– 130Amax.at220V

Dimensions • Serverappliancedimensions– 45mmH×419mmW×401mmD(1.8in.×16.5in.×15.8in.)








AIRDEFENSE 1250 SPECIFICATIONS AIRDEFENSE 3650 SPECIFICATIONS

OPTIONAL ADVANCED SECURITY PLUG-INSAwiderangeofadd-onmodulesareavailableforAirDefenseEnterpriseAppliances,providingcapabilitiesforenforcingwirelesspolicyforremoteusers,advancedtroubleshooting,WEPcloaking,spectrumanalysis,andmanagementofmultipleappliancesfromacentralizedconsole.

SERVICES FOR AN END-TO-END SOLUTIONBrocadeGlobalServicesofferscomprehensivecustomersupportforBrocadeenterprisewirelessLANproducts,includinghardwareand24×7softwaresupport,alongwithsoftwareupdatesandnewreleases.

MAXIMIZING INVESTMENTSTohelpoptimizetechnologyinvestments,Brocadeanditspartnersoffercompletesolutionsthatincludeeducation,support,andservices.Formoreinformation,contactaBrocadesalespartnerorvisitwww.brocade.com.

DATASHEET

©2009BrocadeCommunicationsSystems,Inc.AllRightsReserved.10/09GA-DS-1418-00

Brocade,theB-wingsymbol,BigIron,DCX,FabricOS,FastIron,IronPoint,IronShield,IronView,IronWare,JetCore,NetIron,SecureIron,ServerIron,StorageX,andTurboIronareregisteredtrademarks,andDCFM,ExtraordinaryNetworks,andSANHealtharetrademarksofBrocadeCommunicationsSystems,Inc.,intheUnitedStatesand/orinothercountries.Allotherbrands,products,orservicenamesareormaybetrademarksorservicemarksof,andareusedtoidentify,productsorservicesoftheirrespectiveowners.

Notice:Thisdocumentisforinformationalpurposesonlyanddoesnotsetforthanywarranty,expressedorimplied,concerninganyequipment,equipmentfeature,orserviceofferedortobeofferedbyBrocade.Brocadereservestherighttomakechangestothisdocumentatanytime,withoutnotice,andassumesnoresponsibilityforitsuse.Thisinformationaldocumentdescribesfeaturesthatmaynotbecurrentlyavailable.ContactaBrocadesalesofficeforinformationonfeatureandproductavailability.ExportoftechnicaldatacontainedinthisdocumentmayrequireanexportlicensefromtheUnitedStatesgovernment.

Corporate Headquarters SanJose,CAUSAT:[email protected]

European Headquarters Geneva,SwitzerlandT:[email protected]

Asia Pacific Headquarters SingaporeT:[email protected]

Processor • Intel2.33GHzXeon5140Dual-CoreProcessor• 4MBsharedL2cacheand1333MHzFSB• Totaldissipatedpower65W

Memory • 8GBRAM• ErrorCorrectingCodeFullyBufferedDDR2

Harddrives • Two500GB7200RPMSerialATAharddrives• High-reliabilitySeagateSV35Serieswith1,000,000hourMTBF

• RAID1configurationCommunicationports • StackedPS/2portsforkeyboardandmouse

• TwoRJ45NICconnectorsfor10/100/1000Mbconnections

• VideoconnectorBays SlimLineDVD/CD-ROMCertifications UL,cUL,CE,RoHS5/6Power • 1+1redundantpowersystem

• 500WPFCauto-rangingpowersupply– Fullrange:100to240VACat50to60Hz

• Steady-statecurrent:– 8Amax.at115V– 4Amax.at230V

• Inrushcurrent(at25°C/77°Fambientcoldstartforeachpowerunit):– 60Amax.at115V– 100Amax.at230V

Dimensions • Serverappliancedimensions:– 89mmH×419mmW×546mmD(3.5in.×16.5in.×21.5in.)








www.brocade.com

AIRDEFENSE 4250 SPECIFICATIONS

data sheet airdefense enterprise

Documents