Intrusion Prevention Firewall

[Gary Flynn <flynngn () jmu edu>]

Hi,

I'm looking for a cross between an NIDS and a
firewall.

Are there network "IDS" products out there that take action 
to prevent an attack from succeeding other than to:

1) Notify someone to manually deal with it
2) Do a TCP RST on the session
3) Put a router filter in to block the offending IP

I'm looking for something like an application level firewall
controlled by a NIDS engine that would drop offending
traffic at the ingress point. Something like Hogwash but
in a mainstream product capable of being put on a high-speed
production Internet feed.

( http://hogwash.sourceforge.net/ )

Does such a thing exist?

thanks,
-- 
Gary Flynn
Security Engineer - Technical Services
James Madison University

Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/runsafe
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards