RE: Fortinet IDS

From: Teicher, Mark (Mark) (teicher_at_avaya.com)
Date: 07/25/04

  • Next message: Andrea Barisani: "Re: IDS Testing Method"
    Date: Sun, 25 Jul 2004 12:04:48 -0600
    To: "Kyle Maxwell" <krmaxwell@gmail.com>, <focus-ids@securityfocus.com>
    
    

     
    Yes,

    The AV scanning is limited to 10 MB per file, if a file is greater than
    10MB, the performance is dramatically impacted.

    /mark

    -----Original Message-----
    From: Kyle Maxwell [mailto:krmaxwell@gmail.com]
    Sent: Wednesday, July 21, 2004 01:48 PM
    To: focus-ids@securityfocus.com
    Subject: Fortinet IDS

    Does anyone on the list have any experience with the Fortinet products,
    especially the IDS/IPS (and potentially antivirus blocking)?
    Any thoughts? I've read some reviews and the ICSA Labs report but would
    be interested to hear from folks here on the list.

    --
    Kyle Maxwell
    krmaxwell@gmail.com
    ------------------------------------------------------------------------
    --
    Test Your IDS
    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from
    CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    ------------------------------------------------------------------------
    --
    --------------------------------------------------------------------------
    Test Your IDS
    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from CORE
    IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
    --------------------------------------------------------------------------
    

  • Next message: Andrea Barisani: "Re: IDS Testing Method"

    Relevant Pages

    • Re: RE: IDS testing tools
      ... Nessus is a bad choice to test IDS as it is a vulnerability scanner. ... >Find out quickly and easily by testing it with real-world attacks from CORE ... >with real-world attacks from CORE IMPACT. ...
      (Focus-IDS)
    • Re: Host Based IDS
      ... Assunto: RE: Host Based IDS ... Anitian Enterprise Security ... with real-world attacks from CORE IMPACT. ...
      (Focus-IDS)
    • RE: IDS
      ... Subject: IDS ... Safe Access that does pretty much what you describe. ... Find out quickly and easily by testing it with real-world attacks from ... with real-world attacks from CORE IMPACT. ...
      (Focus-IDS)
    • RE: IDS event filtering
      ... It is important to avoid tuning out real attacks when they happen by having over-pruned the inside attack tree... ... > ingress - egress firewall rules, IDS configs, or whatever. ... > CORE IMPACT. ... > Find out quickly and easily by testing it with real-world attacks from ...
      (Focus-IDS)
    • RE: Fortinet IDS
      ... So when the IDS (Ver. ... Subject: Fortinet IDS ... Find out quickly and easily by testing it with real-world attacks from ... CORE IMPACT. ...
      (Focus-IDS)