Re: IDS/IPS Solutions

["Foerst, Daniel P." <FOERST () CUA EDU>]

While I have not personally used Cisco MARS, we did look at a
presentation of the product and  it certainly appears to be impressive,
but it is not cheap - like many Cisco solutions. Additionally one of my
former colleagues who left in the last year uses Cisco MARS on a daily
basis for his job. Having four years working with us he certainly knows
what we perceive to be a nice product, and his recommendation to us was
to stay away from the MARS as it is cumbersome, not overly intuitive and
can be downright frustrating. 

 

While this is just his opinion, I value it highly and have kept it in
mind when learning more about MARS and asking questions. Perhaps many of
his issues were resolved in a new code update. I don't know. He is also
eagerly await their new solution (whatever it may be) that will be
replacing MARS. 

 

This is sad as we try to maintain a homogenous environment here with
Cisco for the most part, but we do use other solutions, e.g.
TippingPoint for our IPS. We are looking/feeling out a Cisco IDS/IPS
solution, so I am greatly interested in others opinions of Cisco's IDSM2
as well. Cisco markets that TippingPoint has issues, TippingPoint states
the opposite, so it can all be very frustrating to find both an ideal
and working solution to fit the budget and environment.

 

 

Daniel Foerst

Manager, Networks & Security

The Catholic University of America

Washington, DC 20064

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Crary, Greg
Sent: Monday, December 07, 2009 3:51 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] IDS/IPS Solutions

 

If I might.... Cisco MARS as well?

 

Thanks,

 

 

 

 
Greg Crary
Director     Customer Support Systems

Office of Information Technology
127 Huston Hall   Cheney, WA 99004    

509.359.2375    gcrary () ewu edu <mailto:gcrary () facilities ewu edu> 

 

 

 

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Gina Mieszczak
Sent: Monday, December 07, 2009 11:56 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] IDS/IPS Solutions

 

Hi - I'm curious if anyone has implemented or is implementing the Cisco
IDSM2 module and their related experiences (if any).

 

Thanks!

 

Gina

 

Gina Mieszczak

Network Security Administrator

Email: gmieszcz () iit edu <mailto:gmieszcz () iit edu> 

Phone: 312.567.3879

Fax: 312.567.5968