RE: CISCOs new IPS

From: Gary Halleen (ghalleen_at_cisco.com)
Date: 02/02/05

  • Next message: Gary Halleen: "RE: CISCOs new IPS" 
    To: "'aruna'" <arunah@slt.lk>, "'Mike Johnson'" <mike@enoch.org>
Date: Tue, 1 Feb 2005 21:25:24 -0800

    Aruna,

    Cisco signatures are updated very regularly, often daily. You can view the
    current and past updates by visiting:
    http://www.cisco.com/pcgi-bin/front.x/ipsalerts/ipsalertsHome.pl

    Gary

     

    -----Original Message-----
    From: aruna [mailto:arunah@slt.lk]
    Sent: Tuesday, February 01, 2005 12:09 AM
    To: Mike Johnson; ghalleen@cisco.com
    Cc: focus-ids@securityfocus.com
    Subject: Re: CISCOs new IPS

    DearAll

    Does any one has an experience on CISCO IDS .

    Do they have regular updates and processor capability etc is preferred.

    Regards

    aruna
    ----- Original Message -----
    From: "Mike Johnson" <mike@enoch.org>
    To: <ghalleen@cisco.com>
    Cc: <focus-ids@securityfocus.com>
    Sent: Sunday, January 30, 2005 1:00 AM
    Subject: Re: CISCOs new IPS

    > Gary Halleen (ghalleen) wrote:
    >> Actually, that's not quite correct, Billy?
    >>
    >> Cisco IPS 5.0 is just around the corner, and is a full-fledged
    >> appliance-based IPS product. It will support various drop actions, as
    >> well
    >> as traffic normalization and antivirus/antiworm.
    >
    > Can you explain this a little more? We have a few 4240's in place now
    > (not inline, obviously), and we're looking forward to 5.0 (though getting
    > more and more annoyed at the slipping ship dates), so I'd love to go ahead

    > and get a head start on some of the new features.
    >
    > And while I'm at it, am I totally missing a way to get a look at the
    > actual packets that trigger the alerts?
    >
    > Mike
    >
    > --------------------------------------------------------------------------
    > Test Your IDS
    >
    > Is your IDS deployed correctly?
    > Find out quickly and easily by testing it with real-world attacks from
    > CORE IMPACT.
    > Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    > to learn more.
    > --------------------------------------------------------------------------
    >
    >

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from
    CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    --------------------------------------------------------------------------

  • Next message: Gary Halleen: "RE: CISCOs new IPS"

    Relevant Pages
    • Quantcast