Threat Protection System – TPS

Comprehensive network security through actionable security intelligence

Key Features

Integrated advanced threat prevention

The TippingPoint® Threat Protection System (TPS) integrates with the TippingPoint Advanced Threat Protection product family, rated as “Recommended” in the NSS Labs Breach Detection System report three years in a row. Together they detect and block targeted attacks and advanced threats through pre-emptive threat prevention, threat insight and prioritization, and real-time enforcement and remediation.

windows mac android ios

On-box SSL inspection

TippingPoint TPS eliminates SSL blind spots by inspecting encrypted SSL traffic
on the same box without compromising network performance, using the same
management and graphical interface. Administration is simple and minimizes IT
configuration and management demands. Policy-based control provides the ability
to determine which SSL encrypted flows should be decrypted for inspection purposes.

windows mac android ios

Agility and flexibility

TippingPoint TPS gives you the flexibility necessary to keep pace with today’s dynamic, evolving enterprise networks, and is designed to follow your network wherever it moves, whether it’s physical or virtual.

windows mac android ios

Operational simplicity 

TippingPoint TPS enables faster time-to-security through a simple management
interface that is easy-to-use and manage. It provides a unified policy and element
management across the entire TippingPoint deployment.

windows mac android ios


  • Features
TippingPoint Standard Virtual vTPS Appliance
  VMWare ESXi 5.5, 6.0
  KVM – Redhat Enterprise Linux 6, 7
Network Drivers VMWare – VMXNet3
  KVM – virtIO
Number of logical cores 3 or 4
Memory required 8 GB
Disk space required 16GB
Virtual Appliance Specifications
Performance Includes 500Mbps inspection license
IPS Concurrent connections 1,000,000
New connections per second Up to 120K VMware
Up to 60K KVM
Number of network segments 1
Number of virtual segments No limit
Management port Yes
Management port Yes


  • Features
Threat Protection System 440T TPNN0002 Threat Protection System 2200T TPNN0005
IPS Inspection Throughput 500Mps Upgradeable to 1Gbps 1 Gbps upgradeable to 2 Gbps
SSL Inspection Not Available Available
Latency <100 microseconds <100 microseconds
Security Contexts 750,000 2,500,000
Concurrent Sessions 7,500,000 10,000,000
New Connections per second 70,000 115,000
Form Factor 1U 2U
Weight 15.28 lbs. (6.93Kg) 26.26 lbs. (11.91Kg)
Dimensions (Wxdxh) 16.78 in.(W) x 17.3 in.(D) x 1.72 in.(H)
42.62 cm x 45.00 cm x 4.40cm
16.77 in. (W) x 18.70 in.(D) x 3.46 in.(H)
42.60 cm x 47.50 cm x 8.80 cm
Management Ports One out-of-band 10/100/1000 RJ-45
One RJ-45 serial console
Manageable via Security Management System(SMS), LSM HTTPS web interface, Command-line, TippingPoint MIB
Network Connectivity Eight 10/100/1000 RJ-45 ports and integrated bypass
One 10/100/1000 RJ-45 high availability ports
Eight 10/100/1000 RJ-45 ports with integrated bypass support
8 x 1G SFP
4 x 10G SFP+
One 10/100/1000 RJ-45 High Availability ports
Support for external ZPHA for SFP/SFP+
On-box Storage 8 GB solid state replaceable CFast flash drive
Voltage 100-240 VAC, 50-60 Hz
Current (max. fused power) 4-2 A 12-6 A
Max power consumption 250W(853 BTU/hour) 493W(1,682 BTU/hour)
Power supply Single fixed Dual, redundant hot-swappable
Operating temperature 32°F to 104°F(0°C to 40°C)
Operating relative humidity 5% to 95% non-condensing
Non-operating/storage temperature -4°F to 158°F(-20°C to 70°C)
Non-operating/storage relative humidity 5% to 95% non-condensing
Altitude Up to 10,000 feet (3,048m)
Safety UL 60950-1, IEC 60950-1
EN 60950-1,CSA 22.2 60950-1
RoHS Compliance
EN55022, CISPR 22, EN55024
CISPR 24, EN61000-3-2
EN61000-3-3, CE Marking


  • Features
2200T 1Gbps 2200T 2Gbps
IPS + SSL Throughput 500 Mbps + 500 Mbps 1.5 Gbps + 500 Mbps
Concurrent Sessions 40,000 40,000
New Connections per second 1,200 1,200 1,200 1,200
Security Contexts 40,000 40,000
Supported Cipher Suites 1k, 2k, 4k

Stop known, undisclosed, and unknown threats

Using a combination of technologies such as deep packet inspection and threat reputation, the TPS provides organizations with a proactive approach to security. Our technology discovers and actively blocks attempts from known, undisclosed, and unknown vulnerabilities.

Industry-leading threat intelligence

Flexible physical and virtual deployment options coupled with automatic recommended settings provide immediate and on-going threat protection with little manual effort. Relying on vulnerability-based filters with threat intelligence from the Zero Day Initiative and DVLabs, the TPS provides an effective barrier to all attempts to exploit known, undisclosed, and unknown vulnerabilities. Vulnerabilities are neutralized often months and weeks in advance of a patch.

Machine learning defense techniques

Digital Vaccine filters maximize protection with machine learning to create mathematical models to predict whether network traffic is malicious or benign. These models are evaluated against network traffic and the TPS makes real-time decisions to immediately and accurately block malicious traffic that emulates known or unknown malware family characteristics with minimal impact on network performance.

In-line threat protection

Powered by real-time, in-line threat intelligence, our technology protects critical data, applications, and infrastructure without affecting network performance. This complete contextual awareness, combined with the threat intelligence from Digital Vaccine Labs (DVLabs) provides the visibility and agility necessary to keep pace with today’s dynamic, evolving enterprise networks.


Trusted expertise   

Get started with Threat Protection System

Trend Micro TippingPoint Network Security solutions 

Trend Micro TippingPoint Network Security Solutions, powered by XGen™ security,  offer real-time network protection, visibility, and centralized management and analytics that are easy to use, configure, and install. Learn more