Re: Top IPS vendors - please read for invitation to Network World review.

[Mark Teicher <mht3 () earthlink net>]

Paul, Andrew,

I just put together a similiar list of IPS products.

Cisco
NAI - Intruvert/Entercept product lines
Sygate - just recently moved from the desktop firewall/host ids market to 
IPS, has limited functionality as an IPS, unless their new product release 
offers more features
Securewave - SecureNT, SecureExe, WIfiLock (I can't remember the wireless 
lockdown tool, they give away)
Innerwall - new to the market but making a presence
ISS - I agree here, but still doesn't have all the characteristics of a IPS 
product according to IDC

PortSentry - is more of a firewall than IPS, does not have any preventative 
functionality similiar to Cisco Secure Agent aka Okena Stormwatch


The real question I have is what defines an IPS product versus an IDS.. IDS 
is obvious, but IPS, it is a very tough definition


At 07:30 PM 8/26/2003, Paul Schmehl wrote:

> --On Tuesday, August 26, 2003 17:41:45 -0700 Andrew Plato 
> <aplato () anitian com> wrote:
> > Host IPS:
> >
> > Cisco Secure Agent (formerly Okena Stormwatch)
> > Sygate
> > RealSecure Desktop Protection (formerly BLackICE)
> > RealSecure Server Sensor
> > Entercept
> > eEye Secure IIS
> >
> > Uhhhh, that's all I can think of right now. There are plenty of others.
> > Those are the biggies. Netscreen used to have a host IPS, does that
> > still exist?
> An outstanding IPS - Portsentry. Open source, works with every firewall 
> available for *nix hosts, does a great job of keeping the bad guys at bay.
>
> Paul Schmehl (pauls () utdallas edu)
> Adjunct Information Security Officer
> The University of Texas at Dallas
> AVIEN Founding Member
> http://www.utdallas.edu
>
> ---------------------------------------------------------------------------
> Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
> October 1-2 (Briefings) in Tysons Corner, VA; the worldÂ's premier 
> technical IT security event. Modeled after the famous Black Hat event in 
> Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
> Symanetc is the Diamond sponsor. Early-bird registration ends September 6 
> Visit: www.blackhat.com
> ---------------------------------------------------------------------------


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world’s premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symanetc is the Diamond sponsor.  Early-bird registration ends September 6 Visit: www.blackhat.com
---------------------------------------------------------------------------