RE: Mcafee Intrushield Reviews

["Nguyen, Thai" <tnguyen () grey com>]

My company bought an Intrushield 2600 sensor along with the manager a
year ago.  We deployed it initially as an IDS for a while to get a sense
of what was considered "normal" traffic.  Switching the sensor into
inline, IPS mode has been a mixed bag.  I've had some nagging problems
with the Intruvert deployment that are peculiar to my distributed
firewall environment, which is comprised of Nokia clusters running
Checkpoint NG AI.  My only real criticism of the Intrushield product is
the lackluster support.  It is certainly not on par with Nokia's or
Cisco's support.


Thai Nguyen


> -----Original Message-----
> From: Stephane Auger [mailto:stephaneauger () pre2post com] 
> Sent: Thursday, October 21, 2004 4:46 PM
> To: security-basics () securityfocus com
> Subject: Mcafee Intrushield Reviews
>
>
> Hey everyone,
>  
>   I've been looking at many different network intrusion 
> prevention systems, and recently attended a conference by 
> Mcafee on their Intrushield product, which interests me a 
> lot.  Does anyone have any experience with them and can tell 
> me if they're good/useful or not and whether they're easy or 
> impossible to manage?  With their price, I'd love to have 
> some feedback first... thanks!
>  
> Stephane Auger