Network attack detectionDoS and DDoS protectionTCP reassembly for fragmented packet protectionBrute force attack mitigationSYN cookie protectionZone-based IP spoofingMalformed packet protectionStateful protocol signaturesWorm protectionSimplified installation through recommended policiesTrojan protectionSpyware/adware/keylogger protectionOther malware protectionProtection against attack proliferation from infected systemsReconnaissance protectionRequest and response side attack protectionCompound attacks - combines stateful signatures and protocol anomaliesCreate custom attack signaturesAttack editing (port range, other)Stream signaturesProtocol thresholdsStateful protocol signaturesDetailed threat descriptions and remediation/patch infoCreate and enforce appropriate application-usage policiesAttacker and target audit trail and reporting