PUBLICATION & RESEARCH LIBRARY

Authors: Keith Bormann, Matt Chips, Thomas Skybakmoen, Matt Wheeler and Ryan Turner

Publish Date: October 30, 2018

The digital world has transformed modern business. The growing use of the Internet has placed more demands than ever on the corporate data center. Organizations today rely more on their IT infrastructure to enable growth, agility, and productivity. But where there is opportunity, there is also risk. Enterprises must protect their end users and they must also protect the intellectual property and mission-critical applications that reside in their data centers.

While perimeter devices are expected to protect end users and a wide range of end user applications, data center security devices are deployed to protect servers and applications hosted in the data center. Data center intrusion prevention systems (DCIPS) are deployed at critical points in the network so their stability and reliability are imperative. The goal of a DCIPS is to identify and block sophisticated threats against web servers, application servers, and database servers without false positives or degradation of network performance.

Implementation of DCIPS can be a complex process, with multiple factors affecting the overall cost of deployment, maintenance, and upkeep. This report focuses on the Total Cost of Ownership (TCO) per Protected Mbps. NSS’ cost analysis includes a three-year TCO, which is based on:

  • Acquisition costs for the DCIPS and a central management system (CMS)
  • Fees paid to the vendor for annual maintenance, support, and signature updates
  • Labor costs for installation, maintenance, and upkeep

Products Evaluated:

  • Fortinet FortiGate 3200D v5.4.10 GA Build 7811
  • Fortinet FortiGate 6300F v5.4.10 GA Build 4283
  • Trend Micro TippingPoint TPS 8400TX v5.1.0.4965

To learn how vendors performed, download a copy of each Test Report. NSS clients can also download the DCIPS Comparative Reports on performance and security. As with all NSS Labs group tests, there was no fee for participation. In addition, the test methodologies applied are in the public domain to provide transparency and to help enterprises understand the results.