RE: need help

["Javier Otero De Alba" <jotero () smartekh com>]

Some in your list are IDS and others IPS, for IDS:

False positives      no real atack but reported
False negatives      real atack but no reported
Throwput             enough capacity for review all messages
Manage               easy, multiple IDS, maintenance, deploy, log

For IPS:
False positives      no real atack but dropped
False negatives      real atack but no reported
Throwput             enough capacity for no lost messages and minimun delay
Recovery             if I lost the IPS ???  no trafic? bypass? HA?
Manage               easy, multiple IDS, maintenance, depoly, log

Ing. Fco. Javier Otero De Alba
Diplomado en Seguridad Informática ITESM CEM 
ITStrap
Product Manager 
Juniper Secure Access SSL

5243-4782 al 84 Ext.300
México, D.F. 



-----Mensaje original-----
De: Gudumba Raj MSc [mailto:nag_theindian () yahoo com]
Enviado el: Viernes, 06 de Agosto de 2004 10:07 a.m.
Para: focus-ids () securityfocus com
Asunto: need help


Hello,
   I am on the way to analyze the present IDS products
like Cisco, NFR, Juniper, Symantec, Triwire IDS
products. But testing isnt my job. But I would like to
know what kinds of problems the present IDS products
facing. I have to address some of the challenges that
the IDS world is facing. Could you please help me.
Thanks in advance.

=====
##############
Gudumba Raj(Naga Raj Peddisetty)
BjornkarrsGatan 11 c 33,
Linkoping,
SE-58436.
Fixed: +46-13-4731134,
GSM: +46-731-521053.


                
__________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail 

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------