Hi Folks,
yes very true latency play important role in Highspeed
networks when we deploy IPS in line. Latency can be
termed as the time taken by the IDS/IPS engine to
process the incoming packet and put it on to the
interface to let it GO to the destination or deny
depeding upon the rules configured for the packet
under inspection. As far as network bursts goes we are
talking about the combination of perfomrance and
processing capabilitites of IDS/IPS engine as well as
the Hardware Memory and processing capabilities.
,Thanks for point ting this out .
regards
tcpfin.
--- Stefano Zanero <stefano.zanero@ieee.org> wrote:
tcp fin wrote:
2. Throuput (If its Inline)
Actually, if the IDS is IN line you actually want to
care about the
_response time_ of the device (i.e. the additional
delay it adds to
packet RTT times), which is not exactly the same
thing as the throughput.
If the IDS is _on line_ but not _in line_ (i.e. a
pure sniffer, not
acting as a gateway, like most IDS products with no
IPS capabilities)
you must all the same take into account the
_throughput_ of the device,
since if the throughput is not high enough, the
device will lose
packets, and therefore lose attacks.
You must also remember that even if your average
network usage is some X
value, you must take into account network bursts,
and do appropriate
capacity planning studies.
Stefano
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with
real-world attacks from CORE
IMPACT.
Go to
http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------
__________________________________
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to
learn more.
--------------------------------------------------------------------------
