Re: NullBound experience anyone?

[WILLIAM I ARNOLD <WARNOLD () UT EDU>]

We have been using their product for about a year now and works well in
our environment. Please feel free to contact off line if you have any
specific questions. Thanks
Bill Arnold
Network Security Engineer
University of Tampa
813-253-6284

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tyler T. Schoenke
Sent: Friday, April 24, 2009 1:03 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] NullBound experience anyone?

I talked to the NullBound vendor at the Educause SPC.  He said the 
device listens to network traffic, detects malware, then drops it by TCP

resets, and some sort of DNS blocking.  It updates signatures hourly.

The price tag for the enterprise device is $2,998, which seems very 
reasonable for what they claim it can do.  The brochure doesn't list the

licensing costs for the software or any ongoing costs.

Can anyone comment on the effectiveness of their product?

Tyler

--
Tyler Schoenke
IT Security Office
University of Colorado - Boulder