RE: Firewall vs. IPS - Differences now (ISS, Intrushield 2.1?)

From: Brito, Nelson (ISS Brazil) (NBrito_at_iss.net)
Date: 08/18/04

  • Next message: X-Force: "ISS Protection Brief: Netscape NSS Library Remote Compromise" 
    Date: Wed, 18 Aug 2004 15:42:08 -0400
To: "Jacob Winston" <jctx09@yahoo.com>, <focus-ids@securityfocus.com>

    The confusion is: there three series of Proventía Appliances.

    1 - Proventía A (A201, A604, A1204 and A1204F): IDS Appliances;
    2 - Proventía G (G100, G200, G1000, G1200 and G1200): The IPS Appliances;
    3 - Proventía M (M10, M30 and M50): Integrated Security Appliances, which is mainly a Firewall.

    It does not mean that you cannot use the Proventía G Series as a static address filter, because if you can do it dynamically (one of the three methods used by Porventía G) you, of course, can do it statically.

    Take a look at:
    http://www.iss.net/products_services/enterprise_protection/proventia/a_series.php
    http://www.iss.net/products_services/enterprise_protection/proventia/g_series.php
    http://www.iss.net/products_services/enterprise_protection/proventia/m_series.php

    - nb

    #!/usr/bin/perl
    {(!($^O=~/^[M]
    *$32/i)&&($0=~
    s!^.*/!!))||($
    0=~s!^.*\\!!)}
    print$0;

    -----Original Message-----
    From: Jacob Winston [mailto:jctx09@yahoo.com]
    Sent: Sunday, August 15, 2004 11:46 PM
    To: focus-ids@securityfocus.com
    Subject: Firewall vs. IPS - Differences now (ISS, Intrushield 2.1?)

    Things are getting a little confusing. ISS claims that its Proventia boxes are also firewallas. Intrushield 2.1 has firewall/layer 4 filtering capabilities now. If the Intrushield box layer 4 acls now then what makes it not be equal to a firewall? What does a firewall do that an IPS doesn't as long as the IPS can do layer-4 access lists? Any info is apprecaited.

    --------------------------------------------------------------------------
    FREE Network Security Webinar - How to implement IPSec security into VPN appliances
     
    New threats and vulnerabilities require new high-performance IPSec VPN solutions for network protection. Join the security experts from SafeNet on August 26 at 1:00 PM (Eastern), and learn how to successfully integrate IPSec security into VPN processors and appliances to provide powerful yet cost-effective VPN solutions for your customers.
    Register now:

    http://www.securityfocus.com/sponsor/SafeNet_focus-ids_040817
    --------------------------------------------------------------------------

    --------------------------------------------------------------------------
    FREE Network Security Webinar - How to implement IPSec security into VPN appliances
     
    New threats and vulnerabilities require new high-performance IPSec VPN solutions for network protection.
    Join the security experts from SafeNet on August 26 at 1:00 PM (Eastern), and learn how to successfully integrate IPSec security into VPN processors and appliances to provide powerful yet cost-effective VPN solutions for your customers.
    Register now:

    http://www.securityfocus.com/sponsor/SafeNet_focus-ids_040817
    --------------------------------------------------------------------------

  • Next message: X-Force: "ISS Protection Brief: Netscape NSS Library Remote Compromise"