RE: Network Box Appliances - IDS

["Fergus Brooks" <fergusb () evolve-online com>]

They are relatively popular in Hong Kong. I have heard positive things
from clients who use them - however I can't give you anything detailed
on the tech.

One thing I can say is that they sell more a solution - they will make
changes remotely etc and they spport the boxes directly. Which can be
good or bad depending on your attitude to managed security services.

Rgds...
 

-----Original Message-----
From: Brent Stackhouse [mailto:brent.stackhouse () fxfn com] 
Sent: Friday, 14 November 2003 5:45 AM
To: focus-ids () securityfocus com
Subject: Network Box Appliances - IDS


Hello,

I'm wondering if anyone has heard of Network Box (www.networkboxusa.com
and www.network-box.com) and their all-in-one appliances, a la
TippingPoint.  I sat through a presentation on their stuff today and
figured out that it's a "hardened" Linux box with "glue" to hold
together a firewall (iptables seems to part of it), IDS (Snort, I
think...), anti-virus (Kaspersky), content-filtering (SurfControl), VPN
(?), and anti-spam (also ?).

Um, okay.  On the one hand I'm glad they're not trying to recreate all
the wheels at one time but the glue may in fact be the problem.  I've
never heard of them before today (I'm mostly a Cisco IDS guy, some
Snort, some RealSecure) and wondered if anyone has any clue as to
whether they're good/bad/ugly.  Right now, they seem to be unknown,
which doesn't fly too well in security-land...

Thanks in advance.

Brent Stackhouse
Network Security Specialist
FundsXpress Financial Network
Austin, Texas

------------------------------------------------------------------------
---
Network with over 10,000 of the brightest minds in information security
at the largest, most highly-anticipated industry event of the year.
Don't miss RSA Conference 2004! Choose from over 200 class sessions and
see demos from more than 250 industry vendors. If your job touches
security, you need to be here. Learn more or register at
http://www.securityfocus.com/sponsor/RSA_focus-ids_031023 
and use priority code SF4.
------------------------------------------------------------------------
---

--
This message has been scanned by AVMail


---------------------------------------------------------------------------
Network with over 10,000 of the brightest minds in information security
at the largest, most highly-anticipated industry event of the year.
Don't miss RSA Conference 2004! Choose from over 200 class sessions and
see demos from more than 250 industry vendors. If your job touches
security, you need to be here. Learn more or register at
http://www.securityfocus.com/sponsor/RSA_focus-ids_031023 
and use priority code SF4.
---------------------------------------------------------------------------