Re: IPS Reliability/Availability

["Richard Bejtlich" <taosecurity () gmail com>]

On 2/3/06, FinAckSyn <finacksyn () yahoo co uk> wrote:
> Hi Mike,
>
> The first question you must ask yourself is whether or
> not you are prepared to put a PC-based solution inline
> in your network?
> So bypass switches may solve reliability issues, but
> why bother going to all that trouble with bypass
> switches and load balanced clusters when there are
> some excellent dedicated, ASIC-based IPS solutions
> available.  TippingPoint, McAfee and TopLayer are the
> biggest players in this space, and should be on any
> shortlist.

Hello,

Don't these same vendors you cite package other vendor's bypass
switches inside their product to keep packets flowing?  Keeping the
ASIC discussion off the table, there shouldn't be a difference
regarding bypass if the bypass switch is housed inside or outside the
appliance, right?

Sincerely,

Richard

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------