Re: TippingPoint vs. Intrushield

["Andy Cuff" <lists () securitywizardry com>]

Hi Jacob,
I feel that one of the primary problems in reviewing so called IPS is
comparing rate based with content based products.  This is why the NSS
review differs from many others.  Rather than use the term IPS for rate
based products I prefer the term Attack Mitigation Systems (AMS), because,
to be frank, they don't necessarily prevent intrusions, they mitigate
attacks.  I feel that certain vendor marketing drones jumped on the IPS term
to mislead customers and sell them products that they don't need.  Don't
misunderstand me, I feel there is a definite need for both products and some
vendors are attempting to combine both technologies.
I have attempted to differentiate between the 2 product lines here:

AMS
http://www.securitywizardry.com/idsdosmit.htm

Network IPS
http://www.securitywizardry.com/inline.htm

hope this helps
-andy
Talisker Security Tools Directory
http://www.securitywizardry.com
----- Original Message ----- 
From: "Jacob Winston" <jctx09 () yahoo com>
To: <focus-ids () securityfocus com>
Sent: Tuesday, July 13, 2004 4:22 AM
Subject: TippingPoint vs. Intrushield


> I am trying to decide which IPS to buy. I read that Tippingpoint won the
latest NSS shootout but Intrushield seems to have won every other shootout
before that. Has anyone used either one before? My Intrushield rep says that
Tippingpoint doesn't have as many detection methods as Intrushield but I
can't find a listing of what methods Tippingpoint does have. Any info is
appreciate. Thank you.
> --------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from
CORE
> IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
> --------------------------------------------------------------------------


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------