[26335] in resnet
Re: Security appliance options
daemon@ATHENA.MIT.EDU (Hicks, Andrew)
Tue May 10 07:42:05 2011
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_2F239CA30116F440864A81616F2944C9157EB8BDMAEXC1etsentera_"
MIME-Version: 1.0
Message-ID: <2F239CA30116F440864A81616F2944C9157EB8BD@MAEXC1.ets.enterasys.com>
Date: Tue, 10 May 2011 11:41:19 +0000
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Hicks, Andrew" <ahicks@enterasys.com>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <4DC4C0E0.2050809@utc.edu>
--_000_2F239CA30116F440864A81616F2944C9157EB8BDMAEXC1etsentera_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Take a serious look at Palo Alto Networks' products. They created the Next=
Gen Firewall market and dominate the space.
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Jeff Kell
Sent: Friday, May 06, 2011 11:48 PM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: Security appliance options
On 5/6/2011 11:11 PM, White, William P (Bill) wrote:
Robert,
TippingPoint IPS have been a real success at the University of Tennessee.
I'll second that, UT-Chattanooga has one as well. One "big plus" is their =
Reputation filtering, which handles a sizeable blacklist of IPs and DNS nam=
es. It scales much better than anything else we tried along those lines.
For firewall, we use Cisco ASAs in an active/active configuration. It limi=
ts your features that way (no VPN, no dynamic routing) but provides good lo=
ad balancing (we run campus on one and resnet on the other, but they provid=
e failover for each other). If you don't need active/active, you can get t=
he full feature set. We're doing VPN elsewhere.
The ASAs also have the IPS modules in them. The Cisco IPS has been steadil=
y diminishing in value (it sits in front of the TP and our internal passive=
Snort IDS, and from the hits on the other two, doesn't catch much).
We also do a little heavy-handed but low-overhead filtering at the edge, e.=
g., null routing the Spamhaus DROP list, which helps.
Never checked into Fortinet here.
Jeff
We are actually in the middle of a firewall eval. We just called Fortinet=
. What it is that you are not impressed about?
Bill
From: Robert Harris <r_harris@Culinary.Edu<mailto:r_harris@Culinary.Edu>>
Reply-To: Resnet Forum <RESNET-L@LISTSERV.ND.EDU<mailto:RESNET-L@LISTSERV.N=
D.EDU>>
Date: Fri, 6 May 2011 13:09:54 -0400
To: <RESNET-L@LISTSERV.ND.EDU<mailto:RESNET-L@LISTSERV.ND.EDU>>
Subject: Security appliance options
Good morning,
What is everyone using for security appliances?
We've had fortinet products on campus for a few years and are not terribly =
impressed.
We're really just looking for some basic AV/IPS protection, maybe some spam=
blocking.
The fortigate was a great idea for multiple layers in addition to our main =
firewalls and mail system, but the product hasn't impressed and the sales s=
upport is also not very enthusiastic.
What type of stand alone products are people using out there?
Thanks!
Robert Harris
Manager of Network
and Audio/Video
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu<http://www.ciachef.edu/>
Food is Life
Create and Savor Yours.(tm)
Please consider the environment before printing this e-mail.
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_2F239CA30116F440864A81616F2944C9157EB8BDMAEXC1etsentera_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=3D"white" lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D">Take a serious look at Pa=
lo Alto Networks’ products. They created the Next Gen Firewall =
market and dominate the space.</span><span style=3D"font-size:10.0pt;font-f=
amily:"Calibri","sans-serif";color:#1F497D"><o:p></o:p>=
</span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D"><o:p> </o:p></span><=
/p>
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Tahoma","sans-serif";color:windowtext">From:</span></b><spa=
n style=3D"font-size:10.0pt;font-family:"Tahoma","sans-serif=
";color:windowtext"> Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU]
<b>On Behalf Of </b>Jeff Kell<br>
<b>Sent:</b> Friday, May 06, 2011 11:48 PM<br>
<b>To:</b> RESNET-L@LISTSERV.ND.EDU<br>
<b>Subject:</b> Re: Security appliance options<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">On 5/6/2011 11:11 PM, White, William P (Bill) wrote:=
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">Robert,<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">TippingPoint IPS have been a real success at the Uni=
versity of Tennessee.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
I'll second that, UT-Chattanooga has one as well. One "big plus&=
quot; is their Reputation filtering, which handles a sizeable blacklist of =
IPs and DNS names. It scales much better than anything else we tried =
along those lines.<br>
<br>
For firewall, we use Cisco ASAs in an active/active configuration. It=
limits your features that way (no VPN, no dynamic routing) but provides go=
od load balancing (we run campus on one and resnet on the other, but they p=
rovide failover for each other). If
you don't need active/active, you can get the full feature set. We'r=
e doing VPN elsewhere.<br>
<br>
The ASAs also have the IPS modules in them. The Cisco IPS has been st=
eadily diminishing in value (it sits in front of the TP and our internal pa=
ssive Snort IDS, and from the hits on the other two, doesn't catch much).<b=
r>
<br>
We also do a little heavy-handed but low-overhead filtering at the edge, e.=
g., null routing the Spamhaus DROP list, which helps.<br>
<br>
Never checked into Fortinet here.<br>
<br>
Jeff<br>
<br>
<br>
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">We are actually in the middle of a firewall ev=
al. We just called Fortinet. What it is that you are not impres=
sed about?<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Bill<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div style=3D"border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0=
in 0in 0in;border-color:rgb(181, 196,
223) -moz-use-text-color -moz-use-text-color">
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:"=
;Calibri","sans-serif"">From:
</span></b><span style=3D"font-size:11.0pt;font-family:"Calibri",=
"sans-serif"">Robert Harris <<a href=3D"mailto:r_harris@Culina=
ry.Edu">r_harris@Culinary.Edu</a>><br>
<b>Reply-To: </b>Resnet Forum <<a href=3D"mailto:RESNET-L@LISTSERV.ND.ED=
U">RESNET-L@LISTSERV.ND.EDU</a>><br>
<b>Date: </b>Fri, 6 May 2011 13:09:54 -0400<br>
<b>To: </b><<a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESNET-L@LISTSER=
V.ND.EDU</a>><br>
<b>Subject: </b>Security appliance options<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div style=3D"margin-left:3.0pt;margin-top:3.0pt;margin-right:3.0pt;margin-=
bottom:.75pt">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">Good morning,
<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">What is everyone using for security ap=
pliances?<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">We've had fortinet products on campus =
for a few years and are not terribly impressed.
<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">We're really just looking for some bas=
ic AV/IPS protection, maybe some spam blocking.<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">The fortigate was a great idea for mul=
tiple layers in addition to our main firewalls and mail system, but the pro=
duct hasn't impressed and the sales support is also not
very enthusiastic. <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">What type of stand alone products are =
people using out there?<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif"">Thanks!<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Se=
goe UI","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<div>
<p class=3D"MsoNormal"><strong><span style=3D"font-size:10.0pt;font-family:=
"Arial","sans-serif"">Robert Harris</span></strong><b><=
span style=3D"font-size:10.0pt;font-family:"Arial","sans-ser=
if""><br>
</span></b><em><span style=3D"font-size:10.0pt;font-family:"Arial"=
;,"sans-serif"">Manager of Network
</span></em><span style=3D"font-size:10.0pt;font-family:"Segoe UI"=
;,"sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><em><span style=3D"font-size:10.0pt;font-family:&quo=
t;Arial","sans-serif"">and Audio/Video</span></em><span styl=
e=3D"font-size:10.0pt;font-family:"Segoe UI","sans-serif&quo=
t;"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><strong><span style=3D"font-size:10.0pt;font-family:=
"Arial","sans-serif"">Culinary Institute of America</sp=
an></strong><span style=3D"font-size:10.0pt;font-family:"Segoe UI"=
;,"sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial","sans-serif"">1946 Campus Drive</span><span style=3D"fo=
nt-size:10.0pt;font-family:"Segoe UI","sans-serif""><o:=
p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial","sans-serif"">Hyde Park, NY<br>
845-451-1681</span><span style=3D"font-size:10.0pt;font-family:"Segoe =
UI","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial","sans-serif""><a href=3D"http://www.ciachef.edu/">www.c=
iachef.edu</a>
</span><span style=3D"font-size:10.0pt;font-family:"Segoe UI",&qu=
ot;sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Arial","sans-serif"">Food is Life</span></b><o:p></o:p></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Arial","sans-serif"">Create and Savor Yours.™</span><=
/b><o:p></o:p></p>
<p class=3D"MsoNormal"> <o:p></o:p></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt;font-family:"=
Arial","sans-serif";color:green">Please consider the environ=
ment before printing this e-mail.</span></b><o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal"><span style=3D"color:windowtext">___________________=
________________________________ You are subscribed to the ResNet-L mailing=
list.
<o:p></o:p></span></p>
<p><span style=3D"color:windowtext">To subscribe, unsubscribe or search the=
archives, go to
<a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html">http://LISTSERV.N=
D.EDU/archives/resnet-l.html</a> __________________________________________=
_________
<o:p></o:p></span></p>
</div>
</body>
</html>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_2F239CA30116F440864A81616F2944C9157EB8BDMAEXC1etsentera_--
