RE: Intrusion Prevention Firewall

["Pieper, Rodney" <rodney.pieper () eds com>]

There is an interesting article in the March issue of Information Security
Magazine

http://www.infosecuritymag.com/2002/mar/roundtable.shtml

2 things stand out. 
Automated response still requires policy. What you want to react to is not
necessarily importent to another environment. 

The IDS field is not currently 'mature' enough for automating reacting. We
need predictive IDS not reactive.

Rod Pieper

-----Original Message-----
From: Stiennon,Richard [mailto:richard.stiennon () gartner com]
Sent: Saturday, March 16, 2002 5:42 PM
To: 'Gary Flynn'; 'firewall-wizards () nfr com'
Subject: RE: [fw-wiz] Intrusion Prevention Firewall


Check out OneSecure's recently announced inline NIDS/Prevention device. This
is exactly what it does. Note CTO, Nir Zuk of FW-1 and VPN-1 fame.
http://www.onesecure.com/products.html
-Richard

-----Original Message-----
From: Gary Flynn [mailto:flynngn () jmu edu]
Sent: Friday, March 15, 2002 4:25 PM
To: firewall-wizards () nfr com
Subject: [fw-wiz] Intrusion Prevention Firewall



Hi,

I'm looking for a cross between an NIDS and a
firewall.

Are there network "IDS" products out there that take action 
to prevent an attack from succeeding other than to:

1) Notify someone to manually deal with it
2) Do a TCP RST on the session
3) Put a router filter in to block the offending IP

I'm looking for something like an application level firewall
controlled by a NIDS engine that would drop offending
traffic at the ingress point. Something like Hogwash but
in a mainstream product capable of being put on a high-speed
production Internet feed.

( http://hogwash.sourceforge.net/ )

Does such a thing exist?

thanks,
-- 
Gary Flynn
Security Engineer - Technical Services
James Madison University

Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/runsafe
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards