[26336] in resnet
Re: Security appliance options
daemon@ATHENA.MIT.EDU (Marion, David)
Tue May 10 10:45:56 2011
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_B68AC1E3BFEE5248A056EC30728694C76A74D08699EXVScampusbri_"
MIME-Version: 1.0
Message-ID: <B68AC1E3BFEE5248A056EC30728694C76A74D08699@EXVS.campus.bridgew.edu>
Date: Tue, 10 May 2011 10:45:27 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Marion, David" <David.Marion@bridgew.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <2F239CA30116F440864A81616F2944C9157EB8BD@MAEXC1.ets.enterasys.com>
--_000_B68AC1E3BFEE5248A056EC30728694C76A74D08699EXVScampusbri_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Robert,
I've been using Palo Alto firewalls for almost a year and I've found them t=
o be super easy to manage, and a good tech support department. They do a lo=
t, and like Andrew said; definitely worth looking into.
Dave Marion
Bridgewater State University
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Hicks, An=
drew
Sent: Tuesday, May 10, 2011 7:41 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: Security appliance options
Take a serious look at Palo Alto Networks' products. They created the Next=
Gen Firewall market and dominate the space.
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Jeff Kell
Sent: Friday, May 06, 2011 11:48 PM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: Security appliance options
On 5/6/2011 11:11 PM, White, William P (Bill) wrote:
Robert,
TippingPoint IPS have been a real success at the University of Tennessee.
I'll second that, UT-Chattanooga has one as well. One "big plus" is their =
Reputation filtering, which handles a sizeable blacklist of IPs and DNS nam=
es. It scales much better than anything else we tried along those lines.
For firewall, we use Cisco ASAs in an active/active configuration. It limi=
ts your features that way (no VPN, no dynamic routing) but provides good lo=
ad balancing (we run campus on one and resnet on the other, but they provid=
e failover for each other). If you don't need active/active, you can get t=
he full feature set. We're doing VPN elsewhere.
The ASAs also have the IPS modules in them. The Cisco IPS has been steadil=
y diminishing in value (it sits in front of the TP and our internal passive=
Snort IDS, and from the hits on the other two, doesn't catch much).
We also do a little heavy-handed but low-overhead filtering at the edge, e.=
g., null routing the Spamhaus DROP list, which helps.
Never checked into Fortinet here.
Jeff
We are actually in the middle of a firewall eval. We just called Fortinet=
. What it is that you are not impressed about?
Bill
From: Robert Harris <r_harris@Culinary.Edu<mailto:r_harris@Culinary.Edu>>
Reply-To: Resnet Forum <RESNET-L@LISTSERV.ND.EDU<mailto:RESNET-L@LISTSERV.N=
D.EDU>>
Date: Fri, 6 May 2011 13:09:54 -0400
To: <RESNET-L@LISTSERV.ND.EDU<mailto:RESNET-L@LISTSERV.ND.EDU>>
Subject: Security appliance options
Good morning,
What is everyone using for security appliances?
We've had fortinet products on campus for a few years and are not terribly =
impressed.
We're really just looking for some basic AV/IPS protection, maybe some spam=
blocking.
The fortigate was a great idea for multiple layers in addition to our main =
firewalls and mail system, but the product hasn't impressed and the sales s=
upport is also not very enthusiastic.
What type of stand alone products are people using out there?
Thanks!
Robert Harris
Manager of Network
and Audio/Video
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu<http://www.ciachef.edu/>
Food is Life
Create and Savor Yours.(tm)
Please consider the environment before printing this e-mail.
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_B68AC1E3BFEE5248A056EC30728694C76A74D08699EXVScampusbri_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" xmlns:m=3D"http://schema=
s.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html=
40"><head><meta http-equiv=3DContent-Type content=3D"text/html; charset=3Du=
s-ascii"><meta name=3DGenerator content=3D"Microsoft Word 14 (filtered medi=
um)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=3Dwhite lang=3DEN-US=
link=3Dblue vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal>=
<span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1=
F497D'>Robert, <o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'fo=
nt-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> =
;</o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font=
-family:"Calibri","sans-serif";color:#1F497D'>I’ve been using Palo Al=
to firewalls for almost a year and I’ve found them to be super easy t=
o manage, and a good tech support department. They do a lot, and like Andre=
w said; definitely worth looking into.<o:p></o:p></span></p><p class=3DMsoN=
ormal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";co=
lor:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span style=
=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Dave=
Marion<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:=
11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Bridgewater State =
University<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-si=
ze:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:=
p></span></p><div><div style=3D'border:none;border-top:solid #B5C4DF 1.0pt;=
padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal><b><span style=3D'font-size=
:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b=
><span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:wi=
ndowtext'> Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] <b>On Behalf Of <=
/b>Hicks, Andrew<br><b>Sent:</b> Tuesday, May 10, 2011 7:41 AM<br><b>To:</b=
> RESNET-L@LISTSERV.ND.EDU<br><b>Subject:</b> Re: Security appliance option=
s<o:p></o:p></span></p></div></div><p class=3DMsoNormal><o:p> </o:p></=
p><div><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D'>Take a serious look at Palo Alto Network=
s’ products. They created the Next Gen Firewall market and domi=
nate the space.</span><span style=3D'font-size:10.0pt;font-family:"Calibri"=
,"sans-serif";color:#1F497D'><o:p></o:p></span></p></div><p class=3DMsoNorm=
al><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color=
:#1F497D'><o:p> </o:p></span></p><div><div style=3D'border:none;border=
-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal><b=
><span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:wi=
ndowtext'>From:</span></b><span style=3D'font-size:10.0pt;font-family:"Taho=
ma","sans-serif";color:windowtext'> Resnet Forum [mailto:RESNET-L@LISTSERV.=
ND.EDU] <b>On Behalf Of </b>Jeff Kell<br><b>Sent:</b> Friday, May 06, 2011 =
11:48 PM<br><b>To:</b> RESNET-L@LISTSERV.ND.EDU<br><b>Subject:</b> Re: Secu=
rity appliance options<o:p></o:p></span></p></div></div><p class=3DMsoNorma=
l><o:p> </o:p></p><p class=3DMsoNormal>On 5/6/2011 11:11 PM, White, Wi=
lliam P (Bill) wrote: <o:p></o:p></p><div><p class=3DMsoNormal>Robert,<o:p>=
</o:p></p></div><div><p class=3DMsoNormal><o:p> </o:p></p></div><div><=
p class=3DMsoNormal>TippingPoint IPS have been a real success at the Univer=
sity of Tennessee.<o:p></o:p></p></div><p class=3DMsoNormal style=3D'margin=
-bottom:12.0pt'><br>I'll second that, UT-Chattanooga has one as well. =
One "big plus" is their Reputation filtering, which handles a si=
zeable blacklist of IPs and DNS names. It scales much better than any=
thing else we tried along those lines.<br><br>For firewall, we use Cisco AS=
As in an active/active configuration. It limits your features that wa=
y (no VPN, no dynamic routing) but provides good load balancing (we run cam=
pus on one and resnet on the other, but they provide failover for each othe=
r). If you don't need active/active, you can get the full feature set=
. We're doing VPN elsewhere.<br><br>The ASAs also have the IPS module=
s in them. The Cisco IPS has been steadily diminishing in value (it s=
its in front of the TP and our internal passive Snort IDS, and from the hit=
s on the other two, doesn't catch much).<br><br>We also do a little heavy-h=
anded but low-overhead filtering at the edge, e.g., null routing the Spamha=
us DROP list, which helps.<br><br>Never checked into Fortinet here.<br><br>=
Jeff<br><br><o:p></o:p></p><div><p class=3DMsoNormal><o:p> </o:p></p><=
/div><div><p class=3DMsoNormal>We are actually in the middle of a fir=
ewall eval. We just called Fortinet. What it is that you are no=
t impressed about?<o:p></o:p></p></div><div><p class=3DMsoNormal><o:p> =
;</o:p></p></div><div><p class=3DMsoNormal>Bill<o:p></o:p></p></div><div><p=
class=3DMsoNormal><o:p> </o:p></p></div><div style=3D'border:none;bor=
der-top:solid windowtext 1.0pt;padding:3.0pt 0in 0in 0in;border-color:rgb(1=
81, 196, 223) -moz-use-text-color -moz-use-text-color'><=
p class=3DMsoNormal><b><span style=3D'font-size:11.0pt;font-family:"Calibri=
","sans-serif"'>From: </span></b><span style=3D'font-size:11.0pt;font-famil=
y:"Calibri","sans-serif"'>Robert Harris <<a href=3D"mailto:r_harris@Culi=
nary.Edu">r_harris@Culinary.Edu</a>><br><b>Reply-To: </b>Resnet Forum &l=
t;<a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESNET-L@LISTSERV.ND.EDU</a>&=
gt;<br><b>Date: </b>Fri, 6 May 2011 13:09:54 -0400<br><b>To: </b><<a hre=
f=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESNET-L@LISTSERV.ND.EDU</a>><br><=
b>Subject: </b>Security appliance options<o:p></o:p></span></p></div><div><=
p class=3DMsoNormal><o:p> </o:p></p></div><div><div style=3D'margin-le=
ft:3.0pt;margin-top:3.0pt;margin-right:3.0pt;margin-bottom:.75pt'><div><p c=
lass=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Segoe UI","sa=
ns-serif"'>Good morning, <o:p></o:p></span></p></div><div><p class=3DMsoNor=
mal><span style=3D'font-size:10.0pt;font-family:"Segoe UI","sans-serif"'>&n=
bsp;<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'fo=
nt-size:10.0pt;font-family:"Segoe UI","sans-serif"'>What is everyone using =
for security appliances?<o:p></o:p></span></p></div><div><p class=3DMsoNorm=
al><span style=3D'font-size:10.0pt;font-family:"Segoe UI","sans-serif"'>&nb=
sp;<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'fon=
t-size:10.0pt;font-family:"Segoe UI","sans-serif"'>We've had fortinet produ=
cts on campus for a few years and are not terribly impressed. <o:p></o:p></=
span></p></div><div><p class=3DMsoNormal><span style=3D'font-size:10.0pt;fo=
nt-family:"Segoe UI","sans-serif"'> <o:p></o:p></span></p></div><div><=
p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Segoe UI",=
"sans-serif"'>We're really just looking for some basic AV/IPS protection, m=
aybe some spam blocking.<o:p></o:p></span></p></div><div><p class=3DMsoNorm=
al><span style=3D'font-size:10.0pt;font-family:"Segoe UI","sans-serif"'>&nb=
sp;<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'fon=
t-size:10.0pt;font-family:"Segoe UI","sans-serif"'>The fortigate was a grea=
t idea for multiple layers in addition to our main firewalls and mail syste=
m, but the product hasn't impressed and the sales support is also not very =
enthusiastic. <o:p></o:p></span></p></div><div><p class=3DMsoNormal><span s=
tyle=3D'font-size:10.0pt;font-family:"Segoe UI","sans-serif"'> <o:p></=
o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'font-size:10.=
0pt;font-family:"Segoe UI","sans-serif"'>What type of stand alone products =
are people using out there?<o:p></o:p></span></p></div><div><p class=3DMsoN=
ormal><span style=3D'font-size:10.0pt;font-family:"Segoe UI","sans-serif"'>=
<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'=
font-size:10.0pt;font-family:"Segoe UI","sans-serif"'>Thanks!<o:p></o:p></s=
pan></p></div><div><p class=3DMsoNormal><span style=3D'font-size:10.0pt;fon=
t-family:"Segoe UI","sans-serif"'> <o:p></o:p></span></p></div><div><d=
iv><p class=3DMsoNormal><strong><span style=3D'font-size:10.0pt;font-family=
:"Arial","sans-serif"'>Robert Harris</span></strong><b><span style=3D'font-=
size:10.0pt;font-family:"Arial","sans-serif"'><br></span></b><em><span styl=
e=3D'font-size:10.0pt;font-family:"Arial","sans-serif"'>Manager of Network =
</span></em><span style=3D'font-size:10.0pt;font-family:"Segoe UI","sans-se=
rif"'><o:p></o:p></span></p></div><div><p class=3DMsoNormal><em><span style=
=3D'font-size:10.0pt;font-family:"Arial","sans-serif"'>and Audio/Video</spa=
n></em><span style=3D'font-size:10.0pt;font-family:"Segoe UI","sans-serif"'=
><o:p></o:p></span></p></div><div><p class=3DMsoNormal><strong><span style=
=3D'font-size:10.0pt;font-family:"Arial","sans-serif"'>Culinary Institute o=
f America</span></strong><span style=3D'font-size:10.0pt;font-family:"Segoe=
UI","sans-serif"'><o:p></o:p></span></p></div><div><p class=3DMsoNormal><s=
pan style=3D'font-size:10.0pt;font-family:"Arial","sans-serif"'>1946 Campus=
Drive</span><span style=3D'font-size:10.0pt;font-family:"Segoe UI","sans-s=
erif"'><o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D=
'font-size:10.0pt;font-family:"Arial","sans-serif"'>Hyde Park, NY<br>845-45=
1-1681</span><span style=3D'font-size:10.0pt;font-family:"Segoe UI","sans-s=
erif"'><o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D=
'font-size:10.0pt;font-family:"Arial","sans-serif"'><a href=3D"http://www.c=
iachef.edu/">www.ciachef.edu</a> </span><span style=3D'font-size:10.0pt;fon=
t-family:"Segoe UI","sans-serif"'><o:p></o:p></span></p></div><div><p class=
=3DMsoNormal><b><span style=3D'font-size:10.0pt;font-family:"Arial","sans-s=
erif"'>Food is Life</span></b><o:p></o:p></p><p class=3DMsoNormal><b><span =
style=3D'font-size:10.0pt;font-family:"Arial","sans-serif"'>Create and Savo=
r Yours.™</span></b><o:p></o:p></p><p class=3DMsoNormal> <o:p></=
o:p></p><p class=3DMsoNormal><b><span style=3D'font-size:9.0pt;font-family:=
"Arial","sans-serif";color:green'>Please consider the environment before pr=
inting this e-mail.</span></b><o:p></o:p></p></div></div></div></div><p cla=
ss=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal><span style=3D'col=
or:windowtext'>___________________________________________________ You are =
subscribed to the ResNet-L mailing list. <o:p></o:p></span></p><p><span sty=
le=3D'color:windowtext'>To subscribe, unsubscribe or search the archives, g=
o to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html">http://LISTS=
ERV.ND.EDU/archives/resnet-l.html</a> _____________________________________=
______________ <o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'co=
lor:windowtext'>___________________________________________________ You are=
subscribed to the ResNet-L mailing list. <o:p></o:p></span></p><p>To subsc=
ribe, unsubscribe or search the archives, go to <a href=3D"http://LISTSERV.=
ND.EDU/archives/resnet-l.html">http://LISTSERV.ND.EDU/archives/resnet-l.htm=
l</a> ___________________________________________________ <o:p></o:p></p></=
div></body></html>=
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_B68AC1E3BFEE5248A056EC30728694C76A74D08699EXVScampusbri_--
