Re: TippingPoint vs. Intrushield

From: Andy Cuff (lists_at_securitywizardry.com)
Date: 07/14/04

  • Next message: Andy Cuff: "Re: TippingPoint vs. Intrushield"
    To: "Jacob Winston" <jctx09@yahoo.com>, <focus-ids@securityfocus.com>
    Date: Wed, 14 Jul 2004 13:36:17 +0100
    
    

    Hi Jacob,
    I feel that one of the primary problems in reviewing so called IPS is
    comparing rate based with content based products. This is why the NSS
    review differs from many others. Rather than use the term IPS for rate
    based products I prefer the term Attack Mitigation Systems (AMS), because,
    to be frank, they don't necessarily prevent intrusions, they mitigate
    attacks. I feel that certain vendor marketing drones jumped on the IPS term
    to mislead customers and sell them products that they don't need. Don't
    misunderstand me, I feel there is a definite need for both products and some
    vendors are attempting to combine both technologies.
    I have attempted to differentiate between the 2 product lines here:

    AMS
    http://www.securitywizardry.com/idsdosmit.htm

    Network IPS
    http://www.securitywizardry.com/inline.htm

    hope this helps
    -andy
    Talisker Security Tools Directory
    http://www.securitywizardry.com
    ----- Original Message -----
    From: "Jacob Winston" <jctx09@yahoo.com>
    To: <focus-ids@securityfocus.com>
    Sent: Tuesday, July 13, 2004 4:22 AM
    Subject: TippingPoint vs. Intrushield

    >
    >
    > I am trying to decide which IPS to buy. I read that Tippingpoint won the
    latest NSS shootout but Intrushield seems to have won every other shootout
    before that. Has anyone used either one before? My Intrushield rep says that
    Tippingpoint doesn't have as many detection methods as Intrushield but I
    can't find a listing of what methods Tippingpoint does have. Any info is
    appreciate. Thank you.
    >
    > --------------------------------------------------------------------------
    > Test Your IDS
    >
    > Is your IDS deployed correctly?
    > Find out quickly and easily by testing it with real-world attacks from
    CORE
    > IMPACT.
    > Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    > --------------------------------------------------------------------------
    >

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from CORE
    IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
    --------------------------------------------------------------------------


  • Next message: Andy Cuff: "Re: TippingPoint vs. Intrushield"

    Relevant Pages

    • Re: TippingPoint vs. Intrushield
      ... I emailed you earlier about IPS vs. AMS, I was completely off track both ... Subject: TippingPoint vs. Intrushield ...
      (Focus-IDS)
    • RE: Tippingpoint
      ... My company is a TippingPoint reseller. ... best IPSs on the market. ... TP is probably the only IPS I would feel totally comfortable installing ... Find out quickly and easily by testing it with real-world attacks from ...
      (Focus-IDS)
    • RE: Alarm response strategies
      ... Signature/Rule based IPS is fine used in this methd. ... >> Are all of the responses used with a logical sense? ... >> attacks from CORE IMPACT. ... Find out quickly and easily by testing it with real-world attacks from CORE ...
      (Focus-IDS)
    • Re: IPS comparison
      ... I am a customer of TippingPoint at my day job at a college ... Eventually we decided it was time for an IPS. ... we found network usage was at the max on one of the switches. ... Deployment is a breeze. ...
      (Pen-Test)
    • Re: TippingPoint Releases Open Source Code for First Intrusion Prevention Test Tool, Tomahawk
      ... "end users can set up their own IPS test ... "TippingPoint is contributing Tomahawk ... the set of test pcaps; ... away its pcaps for tcpreplay). ...
      (Focus-IDS)

    Loading