RE: Intrusion Prevention Firewall

["Stiennon,Richard" <richard.stiennon () gartner com>]

Check out OneSecure's recently announced inline NIDS/Prevention device. This
is exactly what it does. Note CTO, Nir Zuk of FW-1 and VPN-1 fame.
http://www.onesecure.com/products.html
-Richard

-----Original Message-----
From: Gary Flynn [mailto:flynngn () jmu edu]
Sent: Friday, March 15, 2002 4:25 PM
To: firewall-wizards () nfr com
Subject: [fw-wiz] Intrusion Prevention Firewall



Hi,

I'm looking for a cross between an NIDS and a
firewall.

Are there network "IDS" products out there that take action 
to prevent an attack from succeeding other than to:

1) Notify someone to manually deal with it
2) Do a TCP RST on the session
3) Put a router filter in to block the offending IP

I'm looking for something like an application level firewall
controlled by a NIDS engine that would drop offending
traffic at the ingress point. Something like Hogwash but
in a mainstream product capable of being put on a high-speed
production Internet feed.

( http://hogwash.sourceforge.net/ )

Does such a thing exist?

thanks,
-- 
Gary Flynn
Security Engineer - Technical Services
James Madison University

Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/runsafe
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards