RE: Firewall vs. IPS - Differences now (ISS, Intrushield 2.1?)

From: Bob Walder (bwalder_at_spamcop.net)
Date: 09/06/04

  • Next message: Thomas: "Re: Linux SuSe host base IDS." 
    To: "'Jose Maria Lopez'" <jkerouac@bgsec.com>
Date: Mon, 6 Sep 2004 10:18:51 +0200

    I agree...... For now!

    But I thought we were talking futures (reading back to Greg's original
    post)

    Given increases in capabilities of hardware, do you REALLY think these
    will still be separate devices in five years time? (And let's not go
    into what "next big thing" will have replaced ALL of these technologies
    by then...;o)

    Regards,

    Bob Walder

    >> -----Original Message-----
    >> From: Jose Maria Lopez [mailto:jkerouac@bgsec.com]
    >> Sent: 05 September 2004 22:43
    >> To: bwalder@spamcop.net
    >> Cc: 'Greg Shipley'; 'Jacob Winston'; focus-ids@securityfocus.com
    >> Subject: RE: Firewall vs. IPS - Differences now (ISS,
    >> Intrushield 2.1?)
    >>
    >>
    >> El lun, 30 de 08 de 2004 a las 23:27, Bob Walder escribió:
    >>
    >> > The only REAL question is who will win the race to product
    >> the perfect
    >> > integrated device - the firewall guys or the IDS/IPS guys?
    >> >
    >> > That's where you can stick your neck out ;o)
    >> >
    >> > Regards,
    >> >
    >> > Bob Walder
    >> > The NSS Group
    >> > www.nss.co.uk
    >>
    >> My personal point of view is that the REAL question it's
    >> that there is no question. If you want real security at your
    >> site you should have a good firewall and after that a good
    >> IPS, and to complete the team an IDS out of the secure zone,
    >> just to see who's knocking at your door or watching new
    >> attacks. Everything else is just cheap talk from the
    >> marketing guys at the
    >> Firewall/IPS/IDS companies.
    >>
    >> --
    >> Jose Maria Lopez Hernandez
    >> Director Tecnico de bgSEC
    >> jkerouac@bgsec.com
    >> bgSEC Seguridad y Consultoria de Sistemas Informaticos
    http://www.bgsec.com ESPAÑA

    The only people for me are the mad ones -- the ones who are mad to live,
    mad to talk, mad to be saved, desirous of everything at the same time,
    the ones who never yawn or say a commonplace thing, but burn, burn, burn
    like fabulous yellow Roman candles.
                    -- Jack Kerouac, "On the Road"

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
    --------------------------------------------------------------------------

  • Next message: Thomas: "Re: Linux SuSe host base IDS."

    Relevant Pages

    • Re: What to do if they ignore you
      ... > My company provides outsource security management/monitoring services. ... The only people for me are the mad ones -- the ones who are mad to live, ... the ones who never yawn or say a commonplace thing, but burn, burn, burn ... Test Your IDS ...
      (Incidents)
    • Re: Snort IDS
      ... > would like to use the Open Source Snort network IDS running on RedHat Linux ... The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. ...
      (comp.security.firewalls)
    • RE: Firewall vs. IPS - Differences now (ISS, Intrushield 2.1?)
      ... bgSEC Seguridad y Consultoria de Sistemas Informaticos ... The only people for me are the mad ones -- the ones who are mad to live, ... the ones who never yawn or say a commonplace thing, but burn, burn, burn ... Test Your IDS ...
      (Focus-IDS)
    • Re: Monitoring software question
      ... tells port and protocol connected to and what local pc did ... bgSEC Seguridad y Consultoria de Sistemas Informaticos ... The only people for me are the mad ones -- the ones who are mad to live, ... the ones who never yawn or say a commonplace thing, but burn, burn, burn ...
      (comp.security.firewalls)
    • Re: simple question about ip_forward and NAT routing.
      ... can access the internet. ... bgSEC Seguridad y Consultoria de Sistemas Informaticos ... The only people for me are the mad ones -- the ones who are mad to live, ... the ones who never yawn or say a commonplace thing, but burn, burn, burn ...
      (comp.os.linux.networking)