> Threat Suppression Engine
> Filtering Technology
   > Vulnerability Filters:
      The Virtual Software Patch
   > Threshold Filters:
      Statistical Anomaly Control
> Phishing Protection
> Spyware Protection
> Quarantine Protection
> Advanced Denial of Service
   Protection
> VoIP Protection

QUICK LINKS
> TippingPoint Data Sheets
> TippingPoint White Papers
> How To Purchase

Threat Suppression Engine

The unparalleled performance, stability and accuracy of the TippingPoint Intrusion Prevention System (IPS) are made possible by multiple patent-pending technological leaps invented by the engineers and scientists at TippingPoint. These advancements are embodied in TippingPoint's Threat Suppression Engine (TSE) - a highly specialized, hardware-based intrusion prevention platform consisting of state-of-the-art network processor technology and TippingPoint's own set of custom ASICs.

The TSE is a line-speed, hardware engine that contains all the functions needed for Intrusion Prevention, including IP defragmentation, TCP flow reassembly, statistical analysis, traffic shaping, flow blocking, flow state tracking and application-layer parsing of over 170 network protocols.

The TSE reconstructs and inspects flow payloads by parsing the traffic at the application layer. As each new packet belonging to a flow arrives, the flow is re-evaluated for malicious content. The instant a flow is deemed malicious, the current packet and all subsequent packets pertaining to the flow are blocked. This ensures that the attack never reaches its destination.

The underlying IPS technology is only possible through the combination of high-speed network processors and custom ASIC chips. These highly specialized traffic classification engines enable the IPS to filter with extreme accuracy at gigabit speeds and microsecond latencies. Unlike software-based systems whose performance is affected by the number of filters installed, the highly-scalable capacity of the hardware engine allows thousands of filters to run simultaneously with no impact on performance or accuracy.

TippingPoint leverages the breakthrough scalability and performance of the TSE to detect protocol anomalies, statistical traffic anomalies, prevent distributed denial of service attacks, and block or rate-limit traffic from unauthorized applications such as peer-to-peer file sharing.