Re: IPS technology question.

From: Bob Walder (bwalder_at_spamcop.net)
Date: 08/26/05

  • Next message: Andrew Plato: "RE: using HIDS for change control" 
    Date: Fri, 26 Aug 2005 08:37:51 +0200
To: Joey Peloquin <joeyp@cotse.net>, Focus-Ids Mailing List <focus-ids@securityfocus.com>

    Joey,

    Many thanks for flagging that, but just to clear up a misunderstanding
    before someone flames us both ;o)

    The figure you refer to refers to the number of TESTS in our test suite
    (currently over 800 in total) which we run for each product. We have not yet
    tested quite that many actual IPS products ;o)

    Across all three editions of the IPS group test report, however, we have
    tested almost all the main players.

    The latest report (over 330 pages) is available on-line at www.nss.co.uk/ips
    and contains reviews of eight products:

    Cisco Systems IPS-4255 V5.0(3) (500Mbps)
    Cisco Systems IPS-4240 V5.0(3) (250Mbps)
    Intoto IntruPro V3.0 (100Mbps)
    Juniper Networks IDP 600F V3.1 (500Mbps)
    NFR Sentivist Smart Sensor 100C V1.3 (100Mbps)
    Radware DefensePro-3000 V2.43 (1Gbps)
    Symantec SNS-7160 V4.0.0.9 (1Gbps)
    Westline Athena Aegis IPS 510L V2.1 (200Mbps)

    Bob Walder
    The NSS Group

    On 25/8/05 14:02, "Joey Peloquin" <joeyp@cotse.net> wrote:

    > NSS has done extensive testing of many IPS products, in fact, I've heard
    > in total, they've tested over ~700 of them, although I've not seen
    > results for all on their site. Have a look;
    >
    > http://www.nss.co.uk/download/download.htm
    >
    > ------------------------------------------------------------------------
    > Test Your IDS
    >
    > Is your IDS deployed correctly?
    > Find out quickly and easily by testing it
    > with real-world attacks from CORE IMPACT.
    > Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    > to learn more.
    > ------------------------------------------------------------------------

    ------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it
    with real-world attacks from CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    ------------------------------------------------------------------------

  • Next message: Andrew Plato: "RE: using HIDS for change control"

    Relevant Pages

    • RE: Current IDS problems
      ... We're actually working an IPS here. ... >>with real-world attacks from CORE IMPACT. ... >ting ding ting ding ting ding ...
      (Focus-IDS)
    • Re: Wishlist for IPS Products
      ... And what about blocking fragmented packets entirely. ... This knocks out most IPS vendors like Tipping Point. ... Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. ...
      (Focus-IDS)
    • RE: IPS technology question.
      ... Subject: IPS technology question. ... >with real-world attacks from CORE IMPACT. ...
      (Focus-IDS)
    • Re: IDS Comparison
      ... We have started round 4 testing of IPS products using a much ... than waiting to collect them for a group test format) ... with real-world attacks from CORE IMPACT. ...
      (Focus-IDS)
    • Re: IPS Reliability/Availability
      ... We are testing MULTI-Gigabit IPS products right now, ... Does anybody have a list of which vendors are using ASICs ... Find out quickly and easily by testing it with real-world attacks from ... with real-world attacks from CORE IMPACT. ...
      (Focus-IDS)