IDS

Big-Time Wireless Security - As a Service

Craig Mathias — Tue, 08 Apr 2008 18:16:56 -0400

It's hard not to recommend some form of IDS/IPS in any enterprise-class WLAN installation. But there's usually some pushback when it comes to the price of this capability; after all, we're installing sensors and servers and software and the cost can add up quickly. Some organizations thus (foolishly, I believe) forgo having a suitable IDS/IPS installed. I'm personally so concerned about WLAN security that I have a small-business-class IDS/IPS system installed in my office, protecting all of six APs.

On the other hand - and hearing about this was a smack-myself-in-the-forehead moment - why not provision IDS/IPS as a service, effectively leasing the infrastructure and offering the rest as a managed service?

Read more

Promising solution ... and every vendor should follow it

xmachine — Wed, 19 Mar 2008 09:31:19 -0400

If every security product vendor including firewalls, IDS's, Web content filtering include a botnet-traffic prevention module, will save the Internet. Because it became a serious problem that everyone has to participate to solve. IronPort, Websense are the top leaders in the content filtering marketing. I hope CSO's reconsider the current classic solutions that are not catching up with the latest threats and hackers techniques. http://extremesecurity.blogspot.com

Cisco Releases New 4Gbps IPS 4270 Appliance

jheary — Wed, 05 Dec 2007 12:29:21 -0500

Cisco has finally entering the high speed IPS market segment! Cisco’s is shipping the IPS 4270 IPS Appliance which can deliver up to 4Gbps of real-world media-rich traffic inspection. Cisco is proud of the fact that this benchmark number was achieved with the Cisco recommended IPS protection settings enabled on the 4270. They used real-world, stateful traffic flows in their testing. Cisco has not released the best case, pie in the sky, UDP performance numbers of the 4270 yet. But it has released expected real-world performance numbers if you deploy the 4270 in a highly transactional environment like e-commerce or IP Voice. This type of environment will drop performance down to 2Gbps of IPS inspection.

Read more

IPv6 more secure? Forget it...

michael — Mon, 26 Nov 2007 16:03:01 -0500

So you heard as well that IPv6 is going to make the Internet more secure? Well, think again... In my opinion IPv6 is going to add a lot of complexity to our networks, and generally security goes DOWN when complexity increases.

Let me expand on this a bit. First of all, IPv6 doesn't change anything fundamental for security. IPv6 follows exactly the same paradigms as IPv4; you won't be able to trust the source address for example either. IPsec was meant to be a differentiator, but by now IPsec is equally deployed for IPv4. Equally? Actually, much more than for IPv6.

Read more

NBA: A network slam-dunk

Thu, 15 Feb 2007 12:19:43 -0500

Read more