I find it peculiar that the author is putting an IPS product and a Firewall under the same umbrella. The fact that both products are capable of blocking traffic doesn't make them the same group. Same as in Math, two objects that shares the same property doesn't necessary make them belong to the same group. The Author missed the entire point in this case.

Knowing the product the Author of this article had tested - what policy did the author deploy? was it the default policy? no modifications? what, one size fits all??

Did the author tried to change the policy? I did on that product and I block 95% of the attacks right of the bat leaving me 5% making up in writing my own snort rules.

Putting a Firewall and an IPS under the same category shows lack of rudimentary understanding of their functionality and purposes.

This article fails to show an accurate representation of that particular product, I find it seriously wanting!

Kornelius

Click to read the article this is in response to.