bw,
I made something similar lately,
first of all start with http://www.nss.co.uk/
personally I would go with TopLayer, the only once passed both tests.
another thing, take a look at the products history, things like
who started as an IPS not an IDS, who is ASIC based , how many proven
concurrent connections it can handle ,
does it follow a protocol analysis or signatures throw & catch.
finally for reference if it makes any sense
· The lack of a stateful firewall for all connections and policy
control. A hardware limit of 10,000 signatures, which can all be used up if
diverse policies are specified for different segments or IP addresses with
existing signatures, leaving no room for expansion.
· The lack of effective high availability solutions that increase
performance and scalability cannot reliably support asymmetry in networks HA
decreases performance significantly.
· Lack of network infrastructure class reliability, required for
in-line deployments.
· Close to 100% reliance on IDS like signatures for protection.
Digital Vaccine, or automatic signature updates on an inline infrastructure
device is thus necessary, and poses a risk of automated blocking of real
world business traffic, and potentially violates network change control
policies.
· No real world Denial of Service (DoS) or DDoS protection.
· Built around an off the shelf Layer 2 switch ASIC and off the
shelf network processors, even claimed latency at between 1ms and 215 ?s is
too high for inline deployments.
TopLayer series handle around 30,000 connection with a latency of 0.04 ms
and 0.08 ms with deep inspection enabled
Please disregard it, if it does not make any sense :)
DokFLeed
Smoke Dope, Eat Soap, Fly Home in a Bubble
----- Original Message -----
From: "bw" <bjshhsjb@yahoo.com>
To: <pen-test@securityfocus.com>
Sent: Monday, July 25, 2005 8:52 PM
Subject: IPS comparison
I have been tasked with comparing IPS appliances. I am
seriously looking at top layer's product line and
tipping point. Does anyone have a spreadsheet or know
of any tool they would be willing to share for
comparing products. Im new to this so any help would
be appreciated
thank you
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
