IDS mailing list archives
Reputation based IPS/IDS - Cisco's tested
From: Joel Snyder <Joel.Snyder () Opus1 COM>
Date: Tue, 11 Aug 2009 17:49:00 +0200
Some of you may remember our discussion back in November, 2008 about using reputation services in IPS. (search for subject line "Email reputation for inout to IDSs?" if you want to read it).
Anyway, I was given a chance to test Cisco's 7.0 IPS that includes the Ironport SenderBase/SensorBase reputation service, and Network World just published the test. Since we discussed the technology (and how no one was actually doing it) on this list, here's a link to how Cisco is finally doing something about it, and what they're doing:
http://www.networkworld.com/reviews/2009/081009-cisco-intrusion-prevention-system-test.html Best regards, jsm -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms () Opus1 COM http://www.opus1.com/jms ----------------------------------------------------------------- Securing Your Online Data Transfer with SSL. A guide to understanding SSL certificates, how they operate and their application. By making use of an SSL certificate on your web server, you can securely collect sensitive information online, and increase business by giving your customers confidence that their transactions are safe. http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;9a80e04e1a17f194
Current thread:
- Reputation based IPS/IDS - Cisco's tested Joel Snyder (Aug 11)
- Re: Reputation based IPS/IDS - Cisco's tested Frank Knobbe (Aug 24)
- Re: Reputation based IPS/IDS - Cisco's tested Gautam Singaraju (Aug 24)
- Re: Reputation based IPS/IDS - Cisco's tested Frank Knobbe (Aug 24)