RE: Fortinet IDS

["Craig Bumpstead" <cbumpste () praxsus dyndns org>]

Kyle,

I put one in, at my previous place of employment, however due to budget
restrictions they were unable to purchase a Fortigate 1000, which they
needed. So when the IDS (Ver. 2.50) was turned on, the throughput wasn't
as good. So we ended up just using the AV, firewall and VPN.

In regard to a limit of 10MB for AV scanning, in my career I have never
seen a 10Mb virus, this is not to say that it isn't possible. By
imbedding a virus/Trojan in another file.

So I would suggest that you need to be careful about the load of the
device once real traffic is run through it.

I personally like them; especially that it is an all in one package. To
some that is a minus. But if redundancy is an issue then buy 2 of them
and have them in fail-over mode.

Hope this helps,
Cheers
Craig

-----Original Message-----
From: Teicher, Mark (Mark) [mailto:teicher () avaya com] 
Sent: Monday, 26 July 2004 4:05 AM
To: Kyle Maxwell; focus-ids () securityfocus com
Subject: RE: Fortinet IDS

 
Yes,

The AV scanning is limited to 10 MB per file, if a file is greater than
10MB, the performance is dramatically impacted.

/mark

-----Original Message-----
From: Kyle Maxwell [mailto:krmaxwell () gmail com] 
Sent: Wednesday, July 21, 2004 01:48 PM
To: focus-ids () securityfocus com
Subject: Fortinet IDS

Does anyone on the list have any experience with the Fortinet products,
especially the IDS/IPS (and potentially antivirus blocking)?
Any thoughts? I've read some reviews and the ICSA Labs report but would
be interested to hear from folks here on the list.

--
Kyle Maxwell
krmaxwell () gmail com

------------------------------------------------------------------------
--
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------
--




------------------------------------------------------------------------
--
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------
--



--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------