Trend Micro Deep Security Agent Deep Packet Inspection + Firewall - license

The high-performance deep packet inspection engine examines all incoming and outgoing traffic, including SSL traffic, for protocol deviations, content that signals an attack, or policy violations. It can operate in detection or prevention mode to protect operating systems and enterprise application vulnerabilities. It protects web applications from application-layer attacks including SQL injection and cross-site scripting. Detailed events provide valuable information, including who attacked, when they attacked and what they attempted to exploit. Administrators can be automatically notified via alerts when an incident has occurred. Deep packet inspection is used for intrusion detection and prevention, web application protection, and application control.

The Third Brigade Deep Security Firewall software module is enterprise-grade, bi-directional, and stateful. It can be used to allow communications over ports and protocols necessary for correct server operation and block all other ports and protocols reducing the risk against unauthorized access to the server.