RE: IPS Performance Testing (pointer to article)




Mark, Can you contribute results from the environments that you have
been working with that have over 1000 IPS sensors? I am assuming that
there would be some quality data you collect in order to monitor
performance.

Jay

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of Mark Teicher
Sent: Monday, July 26, 2010 4:36 PM
To: Walsh, John (Jack)
Cc: focus-ids@xxxxxxxxxxxxxxxxx
Subject: Re: IPS Performance Testing (pointer to article)

I did read the paper thoroughly, as I had mentioned earlier real world
environments that I have been working with involve over 1,000 IPS
sensors deployed worldwide, intergrating into a SAN storage



On Jul 26, 2010, at 3:28 PM, "Walsh, John (Jack)" <jwalsh@xxxxxxxxxxxx>
wrote:

Mark:

The paper is applicable in both lab testing environments and real
world deployments as it talks about the things that impact network IPS

throughput. Give it a read and let me know whether or not it was
helpful.

http://www.icsalabs.com/technology-program/network-ips/papers-multimed
ia


Take care,
Jack

-----Original Message-----
From: Mark Teicher [mailto:mark.teicher@xxxxxxxxx]
Sent: Monday, July 26, 2010 3:12 PM
To: Walsh, John (Jack)
Cc: focus-ids@xxxxxxxxxxxxxxxxx
Subject: Re: IPS Performance Testing (pointer to article)

But is the performance results based on lab testing or real world
deployments? If only lab testing or captures from corporate live
environments then may not apply to large/enterprise environments with

more than 2,000 IPS devices deployed globally. Some Fortune 10
companies have deployed over 16,000 IPS sensors, the results did not
account for rolling/tuned IPS policies over a 12 month period



On Jul 26, 2010, at 2:29 PM, "Walsh, John (Jack)"
<jwalsh@xxxxxxxxxxxx> wrote:

Similar to the article mentioned below, I wrote a paper entitled,
"Factors Affecting Network IPS Throughput". It too may be
helpful. You
can find that as well as some other related
papers/presentations here:


http://www.icsalabs.com/technology-program/network-ips/papers-
multimedia

Take care,
Jack Walsh
Anti-Spam and Network IPS Program Manager
ICSA Labs
717.790.8126


-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx
[mailto:listbounce@xxxxxxxxxxxxxxxxx] On Behalf Of Joel M Snyder
Sent: Monday, July 26, 2010 12:16 PM
To: focus-ids@xxxxxxxxxxxxxxxxx
Subject: IPS Performance Testing (pointer to article)

I don't normally shill my own stuff, but this article came
out today and
it is entirely apropos to the discussion we have been having
about IPS
performance testing (although I wasn't thinking 10G when I
wrote it, I
admit).

http://searchmidmarketsecurity.techtarget.com/tip/0,289483,sid
198_gci1349879_mem1,00.html

"IPS performance is something you can't afford to get wrong.
Unfortunately, performance is difficult to test, and the
results are
almost as hard to describe. As IPS moves further up the
network stack,
performance becomes highly data-dependent. This is different
from what
we're used to witnessing in the world of switches and
routers, where
performance is easy enough to describe. ..."

Apologies to anyone who is offended by the pointer.

jms

--
Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719
Senior Partner, Opus One Phone: +1 520 324 0494
jms@xxxxxxxxx http://www.opus1.com/jms

-----------------------------------------------------------------
Securing Your Online Data Transfer with SSL.
A guide to understanding SSL certificates, how they operate
and their application. By making use of an SSL certificate on
your web server, you can securely collect sensitive
information online, and increase business by giving your
customers confidence that their transactions are safe.
http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;
9a80e04e1a17f194




-----------------------------------------------------------------
Securing Your Online Data Transfer with SSL.
A guide to understanding SSL certificates, how they operate
and their application. By making use of an SSL certificate on
your web server, you can securely collect sensitive
information online, and increase business by giving your
customers confidence that their transactions are safe.

http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;
9a80e04e1a17f194




-----------------------------------------------------------------
Securing Your Online Data Transfer with SSL.
A guide to understanding SSL certificates, how they operate and their
application. By making use of an SSL certificate on your web server, you
can securely collect sensitive information online, and increase business
by giving your customers confidence that their transactions are safe.
http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;9a80e04e1a
17f194



-----------------------------------------------------------------
Securing Your Online Data Transfer with SSL.
A guide to understanding SSL certificates, how they operate and their application. By making use of an SSL certificate on your web server, you can securely collect sensitive information online, and increase business by giving your customers confidence that their transactions are safe.
http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;9a80e04e1a17f194



Relevant Pages