[26330] in resnet
FW: Security appliance options
daemon@ATHENA.MIT.EDU (Muggli, John)
Mon May 9 10:44:03 2011
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_59051A572BE18442AC83CBFA26B4D19421F80520MAILMBX3adcsbsj_"
MIME-Version: 1.0
Message-ID: <59051A572BE18442AC83CBFA26B4D19421F80520@MAIL-MBX3.ad.csbsju.edu>
Date: Mon, 9 May 2011 14:43:42 +0000
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Muggli, John" <Jmuggli@csbsju.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <59051A572BE18442AC83CBFA26B4D19421F804DD@MAIL-MBX3.ad.csbsju.edu>
--_000_59051A572BE18442AC83CBFA26B4D19421F80520MAILMBX3adcsbsj_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Good Morning,
We have been running Fortinet devices and using them as our central router =
for 7 years now. We are very happy with all aspects of their performance a=
nd support.
Our local sales support person is outstanding.
Feel free to contact me if you would like more information.
Cheers
John
John Muggli - Network Manager
College of Saint Benedict / Saint John's University
37 College Ave South
Saint Joseph, MN 56374
http://www.csbsju.edu/network - (320) 363-5847
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Jeff Kell
Sent: Friday, May 06, 2011 10:48 PM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: Security appliance options
On 5/6/2011 11:11 PM, White, William P (Bill) wrote:
Robert,
TippingPoint IPS have been a real success at the University of Tennessee.
I'll second that, UT-Chattanooga has one as well. One "big plus" is their =
Reputation filtering, which handles a sizeable blacklist of IPs and DNS nam=
es. It scales much better than anything else we tried along those lines.
For firewall, we use Cisco ASAs in an active/active configuration. It limi=
ts your features that way (no VPN, no dynamic routing) but provides good lo=
ad balancing (we run campus on one and resnet on the other, but they provid=
e failover for each other). If you don't need active/active, you can get t=
he full feature set. We're doing VPN elsewhere.
The ASAs also have the IPS modules in them. The Cisco IPS has been steadil=
y diminishing in value (it sits in front of the TP and our internal passive=
Snort IDS, and from the hits on the other two, doesn't catch much).
We also do a little heavy-handed but low-overhead filtering at the edge, e.=
g., null routing the Spamhaus DROP list, which helps.
Never checked into Fortinet here.
Jeff
We are actually in the middle of a firewall eval. We just called Fortinet=
. What it is that you are not impressed about?
Bill
From: Robert Harris <r_harris@Culinary.Edu<mailto:r_harris@Culinary.Edu>>
Reply-To: Resnet Forum <RESNET-L@LISTSERV.ND.EDU<mailto:RESNET-L@LISTSERV.N=
D.EDU>>
Date: Fri, 6 May 2011 13:09:54 -0400
To: <RESNET-L@LISTSERV.ND.EDU<mailto:RESNET-L@LISTSERV.ND.EDU>>
Subject: Security appliance options
Good morning,
What is everyone using for security appliances?
We've had fortinet products on campus for a few years and are not terribly =
impressed.
We're really just looking for some basic AV/IPS protection, maybe some spam=
blocking.
The fortigate was a great idea for multiple layers in addition to our main =
firewalls and mail system, but the product hasn't impressed and the sales s=
upport is also not very enthusiastic.
What type of stand alone products are people using out there?
Thanks!
Robert Harris
Manager of Network
and Audio/Video
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu<http://www.ciachef.edu/>
Food is Life
Create and Savor Yours.(tm)
Please consider the environment before printing this e-mail.
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_59051A572BE18442AC83CBFA26B4D19421F80520MAILMBX3adcsbsj_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" xmlns:m=3D"http://schema=
s.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html=
40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=3D"white" lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext">Good Morning,<o:p></o:=
p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext">We have been running F=
ortinet devices and using them as our central router for 7 years now. =
We are very happy with all aspects of their performance and
support.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext">Our local sales suppor=
t person is outstanding.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext">Feel free to contact m=
e if you would like more information.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext">Cheers<o:p></o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext">John<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:windowtext"><o:p> </o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ca=
mbria","serif";color:navy">John Muggli - Network Manage=
r</span><span style=3D"font-size:10.0pt;font-family:"Cambria",&qu=
ot;serif""><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ca=
mbria","serif";color:navy">College of Saint Benedict / Saint=
John's University</span><span style=3D"font-size:10.0pt;font-family:"=
Cambria","serif""><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ca=
mbria","serif";color:navy">37 College Ave South</span><span =
style=3D"font-size:10.0pt;font-family:"Cambria","serif"=
"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ca=
mbria","serif";color:navy">Saint Joseph, MN 56374</span><spa=
n style=3D"font-size:10.0pt;font-family:"Cambria","serif&quo=
t;;color:navy"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ca=
mbria","serif""><a href=3D"http://www.csbsju.edu/network">ht=
tp://www.csbsju.edu/network</a> -
</span><span style=3D"font-size:10.0pt;font-family:"Cambria",&quo=
t;serif";color:navy">(320) 363-5847
</span><span style=3D"font-size:10.0pt;font-family:"Cambria",&quo=
t;serif""><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ca=
mbria","serif""><o:p> </o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D"><o:p> </o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D"><o:p> </o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D"><o:p> </o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D"><o:p> </o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D"><o:p> </o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D"><o:p> </o:p></span><=
/p>
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Tahoma","sans-serif";color:windowtext">From:</span></b><spa=
n style=3D"font-size:10.0pt;font-family:"Tahoma","sans-serif=
";color:windowtext"> Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU]
<b>On Behalf Of </b>Jeff Kell<br>
<b>Sent:</b> Friday, May 06, 2011 10:48 PM<br>
<b>To:</b> RESNET-L@LISTSERV.ND.EDU<br>
<b>Subject:</b> Re: Security appliance options<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">On 5/6/2011 11:11 PM, White, William P (Bill) wrote:=
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">Robert,<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">TippingPoint IPS have been a real success at the Uni=
versity of Tennessee.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><br>
I'll second that, UT-Chattanooga has one as well. One "big plus&=
quot; is their Reputation filtering, which handles a sizeable blacklist of =
IPs and DNS names. It scales much better than anything else we tried =
along those lines.<br>
<br>
For firewall, we use Cisco ASAs in an active/active configuration. It=
limits your features that way (no VPN, no dynamic routing) but provides go=
od load balancing (we run campus on one and resnet on the other, but they p=
rovide failover for each other). If
you don't need active/active, you can get the full feature set. We'r=
e doing VPN elsewhere.<br>
<br>
The ASAs also have the IPS modules in them. The Cisco IPS has been st=
eadily diminishing in value (it sits in front of the TP and our internal pa=
ssive Snort IDS, and from the hits on the other two, doesn't catch much).<b=
r>
<br>
We also do a little heavy-handed but low-overhead filtering at the edge, e.=
g., null routing the Spamhaus DROP list, which helps.<br>
<br>
Never checked into Fortinet here.<br>
<br>
Jeff<br>
<br>
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">We are actually in the middle of a firewall ev=
al. We just called Fortinet. What it is that you are not impres=
sed about?<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Bill<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div style=3D"border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0=
in 0in 0in;border-color:rgb(181, 196,
223) -moz-use-text-color -moz-use-text-color">
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:"=
;Calibri","sans-serif"">From:
</span></b><span style=3D"font-size:11.0pt;font-family:"Calibri",=
"sans-serif"">Robert Harris <<a href=3D"mailto:r_harris@Culina=
ry.Edu">r_harris@Culinary.Edu</a>><br>
<b>Reply-To: </b>Resnet Forum <<a href=3D"mailto:RESNET-L@LISTSERV.ND.ED=
U">RESNET-L@LISTSERV.ND.EDU</a>><br>
<b>Date: </b>Fri, 6 May 2011 13:09:54 -0400<br>
<b>To: </b><<a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESNET-L@LISTSER=
V.ND.EDU</a>><br>
<b>Subject: </b>Security appliance options<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div style=3D"margin-left:3.0pt;margin-top:3.0pt;margin-right:3.0pt;margin-=
bottom:.75pt">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">Good morning,
<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">What is everyone using for security ap=
pliances?<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">We've had fortinet products on campus =
for a few years and are not terribly impressed.
<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">We're really just looking for some bas=
ic AV/IPS protection, maybe some spam blocking.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">The fortigate was a great idea for mul=
tiple layers in addition to our main firewalls and mail system, but the pro=
duct hasn't impressed and the sales support is also not
very enthusiastic. <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">What type of stand alone products are =
people using out there?<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">Thanks!<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><strong><span style=3D"font-size:10.0pt;font-family:=
"Arial","sans-serif"">Robert Harris</span></strong><b><=
span style=3D"font-size:10.0pt;font-family:"Arial","sans-ser=
if""><br>
</span></b><em><span style=3D"font-size:10.0pt;font-family:"Arial"=
;,"sans-serif"">Manager of Network
</span></em><span style=3D"font-size:10.0pt;font-family:"Segoe UI"=
;,"sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><em><span style=3D"font-size:10.0pt;font-family:&quo=
t;Arial","sans-serif"">and Audio/Video</span></em><span styl=
e=3D"font-size:10.0pt;font-family:"Segoe UI","sans-serif&quo=
t;"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><strong><span style=3D"font-size:10.0pt;font-family:=
"Arial","sans-serif"">Culinary Institute of America</sp=
an></strong><span style=3D"font-size:10.0pt;font-family:"Segoe UI"=
;,"sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial","sans-serif"">1946 Campus Drive</span><span style=3D"fo=
nt-size:10.0pt;font-family:"Segoe UI","sans-serif""><o:=
p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial","sans-serif"">Hyde Park, NY<br>
845-451-1681</span><span style=3D"font-size:10.0pt;font-family:"Segoe =
UI","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial","sans-serif""><a href=3D"http://www.ciachef.edu/">www.c=
iachef.edu</a>
</span><span style=3D"font-size:10.0pt;font-family:"Segoe UI",&qu=
ot;sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Arial","sans-serif"">Food is Life</span></b><o:p></o:p></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Arial","sans-serif"">Create and Savor Yours.™</span><=
/b><o:p></o:p></p>
<p class=3D"MsoNormal"> <o:p></o:p></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt;font-family:"=
Arial","sans-serif";color:green">Please consider the environ=
ment before printing this e-mail.</span></b><o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><span style=3D"color:windowtext">___________________=
________________________________ You are subscribed to the ResNet-L mailing=
list.
<o:p></o:p></span></p>
<p><span style=3D"color:windowtext">To subscribe, unsubscribe or search the=
archives, go to
<a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html">http://LISTSERV.N=
D.EDU/archives/resnet-l.html</a> __________________________________________=
_________
<o:p></o:p></span></p>
</div>
</body>
</html>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_59051A572BE18442AC83CBFA26B4D19421F80520MAILMBX3adcsbsj_--
