The ICEcap Security Suite consists of the following components that all work together to provide complete and pervasive security.

ICEcap Manager
Quickly deploy, manage, and update all BlackICE Agents, Sentries and Guards from a single manager throughout the borderless network. ICEcap consolidates alerts, logs hostile activity, and forwards information to other applications, including enterprise management consoles and trouble-ticket systems. Collective Awareness allows one Agent, Sentry or Guard to alert all others to potentially dangerous activity anywhere in the network.

BlackICE Agent
BlackICE Agents deployed on every server, notebook and remote user system protect the entire corporate network. BlackICE Agents centrally report to the ICEcap Manager, and enforce user, group, or enterprise-wide security policies set by ICEcap Manager. BlackICE Agents run on Solaris, Linux and Windows platforms. BlackICE Agents are compatible with VPN clients.

BlackICE Guard
BlackICE Guard is the first in-line intrusion protection product that eliminates hostile traffic from a network. Guard identifies and removes attacks from a segment before the attack can succeed.

BlackICE Sentry
BlackICE Sentry provides network-based intrusion detection on Gigabit and Fast Ethernet segments without the need for expensive hardware-based solutions. BlackICE sentries report suspicious or hostile traffic directed against any device, from printers to notebooks to mainframes, back to the ICEcap Manager.

InstallPac
InstallPac is a remote installation tool that minimizes workload by pushing BlackICE Agents and Sentries, as well as updates, out across the enterprise at the click of a button.

Network ICE is the only company to utilize patent-pending 7-layer decode technology, instead of simple pattern-matching to detect, identify and block attackers. Decoding each packet is a significantly more efficient and thorough method for detecting attacks than merely matching signature patterns. BlackICE technology, found in our BlackICE Agents, Guard, and Sentry products, decodes and detects attacks others miss, including fragmented attacks, NMAP Scans and many other malicious attacks without affecting CPU utilization or system throughput.

BlackICE Technology actively defends each system by employing a multi-layered defense mechanism. Like a firewall, the first layer of protection blocks the ports that do not need to be open on the protected machine. The second defense layer is the dynamic analysis of all of the traffic destined to any open ports to ensure the validity of these communications. While traditional firewalls cannot stop malicious activity directed at available ports, BlackICE technology enables Network ICE products to thwart these attacks in real time.

Easy Deployment, Management and Updates
From a single manager, administrators can deploy protection to all devices inside and outside the firewall, providing a consistent rules-based security policy for all users, regardless of location. ICEcap pushes updates out to all agents, making updates of local and remote systems virtually painless.

Unmatched Networking Technology
Network ICE technology is at home in the most demanding networking environments: Gigabit Ethernet, Multi-processor CPUs, Full-bandwidth utilization of 100MB/s segments, DHCP addressing, even Switched environments. No matter how challenging the environment, Network ICE delivers world-class protection.

Affordable Protection for Every System, Everywhere
For the first time, administrators can afford to deploy protection on every device and every segment in their network. No longer will they have to compromise the integrity of their security strategy due to budget constraints.