full-disclosure - Re: Tipping Point IPS systems

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: rdump at river.com (Richard Johnson)
Subject: Re: Tipping Point IPS systems

In article 
<8CFE45BE48312B48940923D31F91BF1F0A2C0ADD@...8ex06.reyrey.com>,
 "Forbes, Robert" <Robert_Forbes@...rey.com> wrote:

> Really the Cadillac of IPS, it is designed for high load networks. We were
> very impressed with it but it carries a hefty price tag for that
> performance. 

Tipping Point UnityOne Intrusion Prevention Systems (augh, -hate- that 
IPS jargon, it's a transparent firewall with packet inspection :-) can 
keep up with real-world traffic levels at large academic sites.  As we 
all move to 10gig networking, though...

Netscreen (now Juniper) IDP systems can keep up with most present 
levels too, very likely at a lower price.  Of course, they're not going 
to do 10gig filtering yet, either.

In my view, the higher Tipping Point price mainly buys you a much more 
mature and focused signature/detect development process than you get 
(yet?) with the somewhat newer Netscreen and other competitive 
offerings.  That may well be worth it to you if your staffing is like 
ours.

Richard

-- 
My mailbox. My property. My personal space. My rules. Deal with it.
                        http://www.river.com/users/share/cluetrain/