Skip Links

Network World

  • Social Web 
  • Email 
  • Close
Clear Choice Test: Intrusion-prevention systems
Inside this test package
View from the lab: Go inside the IPS test bed at Newman's lab
Full report of usability testing
Why no product stopped Cisco exploit

Downsides of IPS coverage

How we tested IPS systems
Archive of Network World tests | Subscribe to the Network Product Test Results newsletter

Signature issue dogs top-notch Top Layer

By David Newman, Joel Snyder , Network World , 09/11/2006
  • Share/Email
  • Comment
  • Print

Company: Top Layer Networks

Product: IPS 5500-1000

www.toplayer.com

As a rate-based IPS, Top Layer is clearly top notch. Integrating signature-based IPS into the product was clearly a wise move for Top Layer, but the signature-based IPS capabilities are just not on par with the rate-based IPS — at least at this time.

While Top Layer has a mature product with an excellent management interface, the vendor hasn’t quite filled out the signature-based IPS part of its product to be as full-featured and flexible as the rate-based part. Nevertheless, the IPS 5500-1000 is still an outstanding IPS and would be a powerful security tool in an enterprise arsenal, especially used in front of server farms and other high-volume, static environments. 

The IPS 5500 was among the fastest performers in our tests with one and two port pairs. It delivered essentially line-rate performance in baseline tests with TCP and UDP alike. However, forwarding rates dropped and latency rose when we subjected the system to heavy attack.The IPS 5500 also leaked a small amount of attack traffic, but the vendor attributes that to a misconfiguration on its part in firewall policy.


< Previous: Pricy TippingPoint pushes | Return to main: IPS performance >

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed