[89674] in North American Network Operators' Group
RE: recommendations regarding IPS
daemon@ATHENA.MIT.EDU (Edward W. Ray)
Fri Mar 31 17:35:52 2006
From: "Edward W. Ray" <spamjail@mmicman.com>
To: "'Hegger, Stefan'" <Stefan.Hegger@lycos-europe.com>,
"'Robert E.Seastrom'" <rs@seastrom.com>
Cc: <nanog@merit.edu>
Date: Fri, 31 Mar 2006 14:33:20 -0800
In-Reply-To: <1143814589.9949.18.camel@arthur-dent>
Errors-To: owner-nanog@merit.edu
Tipping Point IPS is the gold standard these days. Signature-based, which
annual fee to get the signatures. Signatures are usually weekly at a
minimum. I use the Unity 50, but they do have Gbps IPS. All of their IPSes
are "bump-in-the-wire" which means that you do not have to assign an address
(operates at layer2 instead of layer 3).
Edward W. Ray
CISSP, MCSE+Security, P.E., SANS GCIA Gold, SANS GCIH Gold
President
NetSec Design & Consulting
http://www.netsecdesign.com
(714) 997-9226
