Warning!

Your browser may not support JavaScript

IxDefend™ - Core Internet

Preemptive security analysis to minimize network threats

The IxDefend™ Core Internet bundle, designed to be used by enterprises and service providers, provides additional Internet services to the IxDefend product line. The Core Internet bundle preemptively eliminates security-related flaws in the implementation phase to harden all network enabled devices.

The protocols included are:

ARP – Address Resolution Protocol
DHCP – Dynamic Host Control Protocol, both client and server
DHCPv6 – Dynamic Host Control Protocol for IPv6, both client and server
DNS – Domain Name System protocol, including Zone Transfer, both client and server
FTP – File Transfer Protocol, server
HTTP - Hypertext Transfer Protocol for client and server
ICMP – Internet Control Message Protocol
ICMPv6 – Internet Control Message Protocol for IPv6
IGMP – Internet Group Management Protocol, versions 1, 2 and 3
IPv4 – Internet Protocol, version 4
IPv6 – Internet Protocol, version 6
NTP – Network Time Protocol, versions 1 and 2
TCP / TCPv6 – Transmission Control Protocol, both IPv4 and IPv6
UDP / UDPv6 – User Datagram Protocol, both IPv4 and IPv6
IPSec – IP security encapsulation

Any protocol grouping in the Core Internet bundle can be used in conjunction with the protocols found in other IxDefend product bundles, such as:

Specification - Core Internet Bundle

Protocols	Specifications
ARP	RFC826 RFC903 RFC1293
DHCP server	RFC951 – BOOTSTRAP PROTOCOL (BOOTP) RFC2131 – Dynamic Host Configuration Protocol RFC2132 – DHCP Options and BOOTP Vendor Extensions RFC2241 – DHCP Options for Novell Directory Services RFC2242 – Netware/IP Domain Name and Information RFC2485 – DHCP Option for The Open Group's User Authentication Protocol RFC2563 – DHCP Option to Disable Stateless Auto-Configuration in IPv4 Clients
DHCP client	RFC951 – BOOTSTRAP PROTOCOL (BOOTP) RFC2131 – Dynamic Host Configuration Protocol RFC2132 – DHCP Options and BOOTP Vendor Extensions RFC2241 – DHCP Options for Novell Directory Services RFC2242 – Netware/IP Domain Name and Information RFC2485 – DHCP Option for The Open Group's User Authentication Protocol RFC2563 – DHCP Option to Disable Stateless Auto-Configuration in IPv4 Clients
DHCPv6 client / server	RFC3315 – Dynamic Host Configuration Protocol for IPv6 (DHCPv6) RFC3319 – Dynamic Host Configuration Protocol (DHCPv6) Options for Session Initiation Protocol (SIP) Servers RFC3633 – IPv6 Prefix Options for Dynamic Host Configuration Protocol (DHCP) version 6 RFC3646 – NS Configuration options for Dynamic Host Configuration Protocol for IPv6 (DHCPv6) RFC3898 – Network Information Service (NIS) Configuration Options for Dynamic Host Configuration Protocol for IPv6 (DHCPv6) RFC4075 – Simple Network Time Protocol (SNTP) Configuration Option for DHCPv6 RFC4242 – Information Refresh Time Option for Dynamic Host Configuration Protocol for IPv6 (DHCPv6) RFC4280 – Dynamic Host Configuration Protocol (DHCP) Options for Broadcast and Multicast Control Servers RFC4580 – Dynamic Host Configuration Protocol for IPv6 (DHCPv6) Relay Agent Subscriber-ID Option RFC4649 – Dynamic Host Configuration Protocol for IPv6 (DHCPv6) Relay Agent Subscriber-ID Option RFC4704 – The Dynamic Host Configuration Protocol for IPv6 (DHCPv6) Client Fully Qualified Domain Name (FQDN) Option RFC4776 – Dynamic Host Configuration Protocol (DHCPv4 and DHCPv6) Option for Civic Addresses Configuration Information draft-ietf-dhc-paa-option-05 – DHCP options for PANA Authentication Agents
DNS client / Server / Zone Transfer	RFC1034 – Domain Names - Concepts and Facilities RFC1035 – Domain Names - Implementation and Specification RFC1183 – New DNS RR Definitions RFC1348 – DNS NSAP RRs RFC1706 – DNS NSAP Resource Records RFC1712 – DNS Encoding of Geographical Location RFC1876 – A Means of Expressing Location Information in the Domain Name System RFC1996 – A Mechanism for Prompt Notification of Zone Changes (DNS NOTIFY) RFC2136 – Dynamic Updates for the Domain Name System (DNS UPDATE) RFC2163 – Using the Internet DNS to Distribute MIXER Conformant Global Address Mapping (MCGAM) RFC2230 – Key Exchange Delegation Record for the DNS RFC2535 – Domain Name System Security Extensions RFC2538 – Storing Certificates in the Domain Name System (DNS) RFC2671 – Extension Mechanisms for DNS (EDNS0) RFC2672 – Non-Terminal DNS Name Redirection RFC2782 – A DNS RR for specifying the location of services (DNS SRV) RFC2845 – Secret Key Transaction for DNS (TSIG) RFC2874 – DNS Extensions to Support IPv6 Address Aggregation and Renumbering RFC2930 – Secret Key Establishment for DNS (TKEY RR) RFC3123 – A DNS RR Type for Lists of Address Prefixes (APL RR) RFC3403 – Dynamic Delegation Discovery System (DDDS) Part Three: The Domain Name System (DNS) Database RFC3596 – DNS Extensions to Support IP Version 6
FTP server	RFC959 – File Transfer Protocol (FTP)
HTTP client/ server	RFC2616 – HTTP/1.1 RFC2617 – HTTP authentication: basic and digest access authentication RFC1945 – HTTP/1.0 RFC2965 – HTTP state management mechanism RFC1952 – (HTTP client only) GZIP file format specification
ICMP	RFC792 – Internet Control Message Protocol RFC950 – Internet Standard Subnetting Procedure RFC1256 – ICMP Router Discovery Messages RFC1393 – Traceroute Using an IP Option RFC1788 – ICMP Domain Name Messages RFC2521 – ICMP Security Failures Messages
ICMPv6	RFC2460 – Internet Protocol, Version 6 (IPv6) Specification RFC2461 – Neighbor Discovery for IP Version 6 (IPv6) RFC2462 – IPv6 Stateless Address Autoconfiguration RFC2463 – Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification RFC2710 – Multicast Listener Discovery (MLD) for IPv6 RFC3122 – Extensions to IPv6 Neighbor Discovery for Inverse Discovery Specification RFC3810 – Multicast Listener Discovery Version 2 (MLDv2) for IPv6
IGMP	RFC988 – Host Extensions for IP Multicasting (IGMP) RFC1112 – Host Extensions for IP Multicasting (IGMPv1) RFC2236 – Internet Group Management Protocol, Version 2 RFC3376 – Internet Group Management Protocol, Version 3 RFC3488 – Cisco Systems Router-port Group Management Protocol (RGMP) draft-hayashi-igap – Internet Group membership Authentication Protocol (IGAP) draft-ietf-idmr-traceroute-ipm – A "traceroute" facility for IP Multicast draft-ietf-idmr-igmp-mrdisc – Multicast Router Discovery
IPv4	RFC791 – Internet Protocol - DARPA Internet Program RFC1108 – U.S. Department of Defense Security Options for the Internet Protocol RFC1191 – Path MTU Discovery RFC1385 – EIP: The Extended Internet Protocol RFC1393 – Traceroute Using an IP Option RFC1475 – TP/IX: The Next Internet RFC1770 – IPv4 Option for Sender Directed Multi-Destination Delivery RFC2113 – IP Router Alert Option
IPv6	RFC2402 – IP Authentication Header RFC2460 – Internet Protocol, Version 6 (IPv6) Specification RFC2461 – Neighbor Discovery for IP Version 6 (IPv6) RFC2462 – IPv6 Stateless Address Autoconfiguration RFC2463 – Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification RFC2675 – IPv6 Jumbograms RFC2711 – IPv6 Router Alert Option RFC3775 – Mobility Support in IPv6
NTP	RFC958 – Network Time Protocol (NTP) RFC1059 – Network Time Protocol (Version 1) Specification and Implementation RFC1119 – Network Time Protocol (NTP) Version 2 RFC1305 – Protocol specification for IETF RFC1305 RFC2030 – Simple Network Time Protocol (SNTP) Version 4 for IPv4, IPv6 and OSI
TCP / TCPv6	RFC793 – Transmission Control Protocol - DARPA Internet Program RFC1072 – TCP Extensions for Long-Delay Paths RFC1146 – TCP Alternate Checksum Options RFC1323 – TCP Extensions for High Performance RFC1644 – T/TCP -- TCP Extensions for Transactions - Functional Specification RFC1693 – An Extension to TCP : Partial Order Service RFC2018 – TCP Selective Acknowledgment Options RFC2385 – Protection of BGP Sessions via the TCP MD5 Signature Option RFC2460 – (IPv6 only) Internet Protocol, Version 6 (IPv6) Specification RFC2883 – An Extension to the Selective Acknowledgement (SACK) Option for TCP
UDP / UDPv6	RFC768 – User Datagram Protocol RFC2460 – (IPv6 only) Internet Protocol, Version 6 (IPv6) Specification
IPSec	RFC791 – Internet Protocol RFC792 – Internet Control Message Protocol RFC2402 – IP Authentication Header RFC2403 – HMAC-MD5-96 in ESP and AH RFC2404 – HMAC-SHA-1-96 in ESP and AH RFC2405 – ESP DES-CBC Cipher algorithm RFC2406 – IP Encapsulating Security Payload RFC2410 – Null encryption algorithm for ESP and AH RFC2451 – ESP CBC-mode Cipher Algorithms RFC3406 – AES-CBC Cipher algorithm

Product Ordering Information

936-x021
Core Internet Software Bundle, Preemptively eliminates security-related flaws in the implementation phase to harden all network-enabled devices. Includes IPv4 Tools Test Suite, IPv6 Tools Test Suite, DNS Test Suite, NTP Test Suite, Web Test Suite, DHCPv4 Test Suite, DHCPv6 Test Suite.
The following options are available for each order code. Substitute the first number of the series for the missing code numbers above.

936-1xxx – subscription chassis license

936-2xxx – perpetual chassis license

936-3xxx – subscription PC license

936-4xxx – perpetual PC license

P/N: 915-2204-01 Rev B – February 2009

This material is for informational purposes only and subject to change without notice. It describes Ixia's present plans to develop and make available to its customers certain products, features and capabilities. Ixia is only obligated to provide those deliverables specifically included in a written agreement between Ixia and the customer.