Some in your list are IDS and others IPS, for IDS:
False positives no real atack but reported
False negatives real atack but no reported
Throwput enough capacity for review all messages
Manage easy, multiple IDS, maintenance, deploy, log
For IPS:
False positives no real atack but dropped
False negatives real atack but no reported
Throwput enough capacity for no lost messages and minimun delay
Recovery if I lost the IPS ??? no trafic? bypass? HA?
Manage easy, multiple IDS, maintenance, depoly, log
Ing. Fco. Javier Otero De Alba
Diplomado en Seguridad Informática ITESM CEM
ITStrap
Product Manager
Juniper Secure Access SSL
5243-4782 al 84 Ext.300
México, D.F.
-----Mensaje original-----
De: Gudumba Raj MSc [mailto:nag_theindian@yahoo.com]
Enviado el: Viernes, 06 de Agosto de 2004 10:07 a.m.
Para: focus-ids@securityfocus.com
Asunto: need help
Hello,
I am on the way to analyze the present IDS products
like Cisco, NFR, Juniper, Symantec, Triwire IDS
products. But testing isnt my job. But I would like to
know what kinds of problems the present IDS products
facing. I have to address some of the challenges that
the IDS world is facing. Could you please help me.
Thanks in advance.
=====
##############
Gudumba Raj(Naga Raj Peddisetty)
BjornkarrsGatan 11 c 33,
Linkoping,
SE-58436.
Fixed: +46-13-4731134,
GSM: +46-731-521053.
__________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to
learn more.
--------------------------------------------------------------------------
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to
learn more.
--------------------------------------------------------------------------
