RE: IDS evaluation

From: Gary Halleen (ghalleen@cisco.com)
Date: 08/23/02 

From: "Gary Halleen" <ghalleen@cisco.com>
To: "Saad Kadhi" <bsdguy@docisland.org>, <focus-ids@securityfocus.com>
Date: Fri, 23 Aug 2002 10:49:07 -0700

The new appliances are NOT vaporware, Saad. We've been shipping for
IDS-4235 and IDS-4250 for about 2 months or so now.

IDS-4235 is a 1RU appliance with 10/100/1000 autosensing sniffing interface,
for a cost of only $12,500 list. Detects more than 200Mbps

IDS-4250 is also 1RU, and can come with either 10/100/1000 interface or SX
fiber interface. Price for the copper interface model is $25,000 list. A
little more for the SX fiber model. Detects more than 500Mbps.

As a new alternative for managing these devices, both ship with a very nice
web-based GUI for configuring the IDS, tuning, adding, or removing
signatures, and performing other management tasks.

> -----Original Message-----
> From: Saad Kadhi [mailto:bsdguy@docisland.org]
> Sent: Wednesday, August 21, 2002 11:56 PM
> To: focus-ids@securityfocus.com
> Subject: Re: IDS evaluation
>
>
> On Wed, Aug 21, 2002 at 04:04:07PM -0400, Elijah Savage wrote:
> > I am coming to you experts for a little help. It has come time
> to renew our
> > maintenance contract with cisco we have the old netranger
> product. Well my
> > company wants me to do a review of 3 products of my choice to see what
> > other products may provide us a better solution that what we currently
> > have. We have 12 IDS sensors currently. Can you all recommend 3 products
> > that will be worth my time to take a look at?
> If central management/event correlation is what you need then my
> list would be:
> 1.Enterasys Dragon
> 2.Cisco Secure IDS
> 3.ISS
>
> However, the new appliances from Cisco that promise better
> performance than
> Dragon (among other things) are still vaporware at this time.
>
> I'm a Snort fan but deploying 12 of them with central management
> needs good
> expertise and multi-tool gluying skills.
>
> --
> Saad Kadhi
> [pgp keyid: 35592A6D http://pgp.mit.edu]
> [pgp fingerprint: BF7D D73E 1FCF 4B4F AF63 65EB 34F1 DBBF 3559 2A6D]
> # booth slave for hire
>

Quantcast