Product: Sentivist Smart Sensor ES1000
A strong and deep-rooted heritage in the world of the ultrasophisticated network and security analyst colors every aspect of this product. If you have the time, resources, and interest to take a microscope to your network, then NFR Sentivist is the clear choice. Turning such a powerful analysis tool into an IPS does raise some though, as the Sentivist is almost too configurable and too controllable.
The strength of product – which lies in its capture-and-analysis tools – is also balanced by relative weakness in reporting and alerting. Most of these can be worked around by someone with expertise in Unix, but Sentivist is far from an “out of the box” IPS for someone short on time and interest.
In terms of performance, NFR’s Sentivist turned in relatively modest numbers. In the single-port-pair tests, it put up excellent latency numbers under attack – better, in fact, than some other sensors’ numbers with no attacks. But latency shot way up under heaviest attack.This might be because of a hardware setting that NFR told us about after testing concluded.
< Previous: Forinet's FortiGate | Next: Pricy TippingPoint pushes >
Read more about security in Network World's Security section.