Re: IPS Solution

["Bradley, Stephen" <bradlesw () MIAMIOH EDU>]

I find it interesting you put it that way.  We were pleasantly
surprised by how the PA worked right out of the box during the demo.
I like the way it classifies traffic and doesn't focus on a port.



On Tue, Feb 5, 2013 at 10:18 AM, Di Fabio, Andrea <adifabio () nsu edu> wrote:
> Here is my two cents, and I am hoping to stir up some good conversation with
> respect to IPS solutions. We haven been using TippingPoint for many year.
> After much testings, we recently deployed PaloAlto firewalls into
> production. I must say that am EXTREMELY impressed with the FW performance,
> ease of management, and suprisingly with its IPS feature and with WildFire.
> I feel as if we were almost blind with respect to IPS, and now we have
> gotten LASIK and we have gained much more visibility into what’s going on on
> our network. I have been a proponent of TippingPoint ealy in the days, and I
> was very impressed with it, but I must say that TP is blind compared to PA.
> I feel they are lacking a bit behind. I understand that TP is for heavy duty
> IPS only, but what good is it, if it is almost blind?
>
>
>
> As we revisit our IPS solution again, we are are looking to find dedicated
> IPS hardware that comes close to the PA IPS features and visibility. Your
> feedback is very much appreciated and your point of view very helpful. We
> try to find solutions to augment our PA border firewalls with some dedicated
> IPS with ‘better that 20/40 vision’ J
>
>
>
> From: The EDUCAUSE Security Constituent Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Michael Horne
> Sent: Tuesday, February 05, 2013 8:39 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] IPS Solution
>
>
>
> We have been running a PaloAlto for over a year and are very happy with it!
>
>
>
> From: The EDUCAUSE Security Constituent Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of King, Ronald A.
> Sent: Monday, February 04, 2013 11:46 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] IPS Solution
>
>
>
> We are about to begin investigating IPS solutions for our environment.  So
> far, we are considering Sourcefire and HP/TippingPoint (yes, we are aware of
> the problems since the acquisition).  I would like to ask the group for
> their suggestions for a solution that could be used for a small to medium
> sized EDU with 10 gig backbone and 1 gig to the internet.  If anyone would
> like to include their reasoning for their choice, that would be helpful to
> us.
>
>
>
> I would also like to state that any responses from corporate or reseller
> companies will automatically eliminate them from consideration.
>
>
>
> Thank you in advance.
>
>
>
>
>
> Ronald King
>
> Security Engineer
>
> Norfolk State University
>
> Marie V. McDemmond Center for Applied Research
>
> Suite 401
>
> 555 Park Ave.
>
> Norfolk, Virginia  23504
>
> Phone:  757-823-3918
>
> Fax: 757-823-2128
>
> Email: raking () nsu edu
>
> http://security.nsu.edu



-- 
Stephen W. Bradley CISSP GCIH GWAPT SSCP
Senior Security Engineer
Miami University
IT Services
bradlesw () miamioh edu
513-529-1809