RE: Firewall vs. IPS - Differences now (ISS, Intrushield 2.1?)

["Gary Halleen" <ghalleen () cisco com>]

Let's also not forget NAT/PAT.

Gary


> -----Original Message-----
> From: Ron Gula [mailto:rgula () tenablesecurity com] 
> Sent: Wednesday, August 18, 2004 10:51 AM
> To: focus-ids () securityfocus com
> Subject: Re: Firewall vs. IPS - Differences now (ISS, 
> Intrushield 2.1?)
>
>
> At 02:46 AM 8/16/2004 +0000, you wrote:
>
>
> > Things are getting a little confusing. ISS claims that its Proventia 
> > boxes
> > are also firewallas. Intrushield 2.1 has firewall/layer 4 filtering 
> > capabilities now. If the Intrushield box layer 4 acls now 
> then what makes 
> > it not be equal to a firewall? What does a firewall do that 
> an IPS doesn't 
> > as long as the IPS can do layer-4 access lists? Any info is 
> apprecaited.
>
> It depends on how strict you want to be with a definition of 
> a firewall. On one hand, anything that can filter packets 
> based on IP, TCP, .etc (like a router) can be thought of as a 
> firewall. On the other hand, most enterprise firewalls 
> perform services such as VPN termination, user 
> authentication, usage reporting, routing, DNS/web proxy, .etc.
>
> I think it's great that the IPS guys are adding in ACLs and 
> wished they would have done this sort of thing from the start 
> so we could have avoided the big IDS vs. IPS debate.
>
> Ron Gula, CTO
> Tenable Network Security
> http://www.tenablesecurity.com
>
>
> --------------------------------------------------------------
> ------------
> FREE Network Security Webinar - How to implement IPSec 
> security into VPN appliances 
>  
> New threats and vulnerabilities require new high-performance 
> IPSec VPN solutions for network protection. Join the security 
> experts from SafeNet on August 26 at 1:00 PM (Eastern), and 
> learn how to successfully integrate IPSec security into VPN 
> processors and appliances to provide powerful yet 
> cost-effective VPN solutions for your customers. 
> Register now:
>
> http://www.securityfocus.com/sponsor/SafeNet_focus-ids_040817
> --------------------------------------------------------------
> ------------


--------------------------------------------------------------------------
FREE Network Security Webinar - How to implement IPSec security into VPN appliances 
 
New threats and vulnerabilities require new high-performance IPSec VPN solutions for network protection.
Join the security experts from SafeNet on August 26 at 1:00 PM (Eastern), and learn how to successfully integrate IPSec 
security into VPN processors and appliances to provide powerful yet cost-effective VPN solutions for your customers. 
Register now:

http://www.securityfocus.com/sponsor/SafeNet_focus-ids_040817
--------------------------------------------------------------------------