Product: ipAngel-2500
The ipAngel has a tight integration between a vulnerability scanner and its IPS engine. The idea of a self-tuning IPS, knowledgeable about network topology, and giving complete coverage even if the network manager doesn’t know what’s going on, sounds innovative.
However, we were frustrated by the hot-off-the-presses version of the ipAngel, because the ideas that showed up in the GUI looked like a combined approach that would help reduce IPS false positives and provide tuning capabilities to get full coverage across all applications and services.
The ipAngel should have been a top performer, considering the hulking hardware Ambiron TrustWave supplied for this test – an eight-way dual-core Opteron machine, which is effectively a 16-CPU computer. While we’ve never seen Linux boot up so fast, the performance results were underwhelming. The vendor says it supplied beta drivers that have been optimized since test time.
< Previous: How we tested IPS systems | Next: Demarc's Sentarus >
Read more about security in Network World's Security section.