All,
We are starting an evaluation of four IPS vendors and I would like to
solicit your feedback. Please, if you are a vendor of these products
do not bother emailing me, I will discard them.
If you have used one (or more) of the following vendors IPS products,
I would be interested in hearing your experiences. Especially
experiences revolving around:
* Managability (policy configurations, etc.)
* Reliability (did it cause any network outages, etc.)
* Rule blocking ability (how effective are the signatures in
protecting your network? Did the device require fine tuning /
excessive tweaking?)
* Reporting (how are the reports?)
If there's anything I have missed, please feel free to include it.
Here are the list of Vendors:
ISS
McAfee
Tipping Point
SourceFire or Snort
Cisco
Thanks!
-Sam
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------
