Re: Firewall Upgrade

["Di Fabio, Andrea" <adifabio () NSU EDU>]

We are using both PaloAlto and TippingPoint at the border but I am starting
to question the value added by the border TippingPoint IPS.

 

Andrea Di Fabio, CISO

Director, IT Security and Network

Norfolk State University

Office of Information Technology

Marie V. McDemmond Center for Applied Research, Rm 401M

555 Park Avenue, Suite 401

Norfolk, Virginia 23504

757-823-2896 Office

757-823-2128 Fax

 

NSU email communication is subject to permanent archival, it is covered
under the Freedom of Information Act (FOIA), and may be partially or fully
disclosed.

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Dennis Bohn
Sent: Friday, February 14, 2014 9:59 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Firewall Upgrade

 

A few years ago, many folks were using $_L3/4_Firewall and an IPS like
TippingPoint in tandem.  I am wondering if folks are now using Palo Alto to
cover both of those bases:Firewall and IPS.  Or are you using Palo Alto plus
IPS.

Thanks,
dennis




Dennis Bohn
Manager of Network and Systems 
Adelphi University
bohn () adelphi edu <mailto:bohn () adelphi edu> 
5168773327

 

On Fri, Feb 14, 2014 at 9:51 AM, Roger A Safian <r-safian () northwestern edu
<mailto:r-safian () northwestern edu> > wrote:

At the risk of overloading the Palo Alto band wagon, I'll also go +1.  We
got ours about a year ago, and they have been incredibly useful.  They were
the only system we tested that found, from the beginning, proven hostile
traffic on our net.  The other's had signal, but, way too much noise.  They
are now a critical component of our security posture.


> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv

> [mailto:SECURITY () LISTSERV EDUCAUSE EDU
<mailto:SECURITY () LISTSERV EDUCAUSE EDU> ] On Behalf Of Michael Horne
> Sent: Friday, February 14, 2014 8:45 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU <mailto:SECURITY () LISTSERV EDUCAUSE EDU>

> Subject: Re: [SECURITY] Firewall Upgrade

> I will also give a +1 to Palo Alto, We replaced a pair of aging Nortel
branded
> check points with a pair of PA 5020's. We are very pleased with them and I
> personally would recommend them as well. A lot deeper view into what's
> happening on the network as well. Rule creation is not bad either once
yopu get
> the mind shift changed to zone / application based vrs just a port based
FW.
> Michael Horne
> Network Engineer
> Olin College of Engineering
> 1000 Olin Way, Milas Hall, Suite LL18
> Needham, MA 02492
> 1-781-292-2438 <tel:1-781-292-2438> 
>
>
>
> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU
<mailto:SECURITY () LISTSERV EDUCAUSE EDU> ] On Behalf Of Russo, Dan
> Sent: Thursday, February 13, 2014 2:19 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU <mailto:SECURITY () LISTSERV EDUCAUSE EDU>

> Subject: [SECURITY] Firewall Upgrade
>
> We are looking into upgrading our Firewall. I was wondering if anyone had
> anything to offer in regards to what you are using and the pros/cons
associated
> to it.
>
> Thanks,
>
> Dan

Attachment: smime.p7s
Description: