Educause Security Discussion mailing list archives

Re: IPS conference call


From: Jon Hanny <jehanny () GWU EDU>
Date: Wed, 26 May 2010 15:36:42 -0400

Not to mention that unless it is explicitly turned off, Windows Vista,
Windows 7, and possibly even Windows XP all have IPv6 turned on by
default and IPv6 traffic is running on networks undetected and
unmonitored. Any IPS/IDS these days really need IPv6 functionality in my
opinion.

Respectfully,

----------------------------------
Jon Hanny CISSP, GSLC
Application Security Specialist
The George Washington Universtiy
703-726-4469
jehanny () gwu edu
----------------------------------


On 5/26/2010 3:22 PM, randy marchany wrote:
One question that needs to be asked in any IPS evaluation is does the device
detect IPv6 attacks. I know a the majority of nets are not Ipv6 but that's
not a reason to not have an IPS device be able to detect IPv6.

-Randy Marchany
VA Tech IT Security Office

On Wed, May 26, 2010 at 2:40 PM, Brian Smith-Sweeney
<bsmithsweeney () nyu edu>wrote:


Hello all,

I have seen the "what are your experiences with network intrusion
prevention systems" question come up a few times in the 12-24 months,
and thought I would offer to organize a conference call sometime in the
next week or so to continue those discussions live.  My goal would be to
summarize key points from that conversation and reshare them out to this
list.  This is decidedly non-altruistic - NYU has recently (re)started
an IPS evaluation project and would appreciate having access to such a
summary.

I think it would be particularly useful to discuss IPS evaluation in the
context of the publicly available information from NSSLabs, Gartner, and
ICSA, to see how that data stacks up against your experiences
implementing IPS in a higher-ed environment.

If you're interested in participating please send me a note (offline is
fine), including which vendors you have experience with. In the unlikely
event I get an overwhelming response and have to limit participation I
will make an effort to ensure a range of experiences is represented.

I'm working on some seed questions now which I'm happy to share if
there's interest.

Cheers,
Brian

--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Brian Smith-Sweeney                      Project Lead
ITS Technology Security Services, New York University
bsmithsweeney () nyu edu
http://www.nyu.edu/its/security
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




Current thread: