RE: IPS Market Share

["Andrew Plato" <andrew.plato () anitian com>]

I wonder if Gartner included IDS in that as well? That would explain
ISS's larger size. The Infonetics report I saw is looking at in-line IPS
only. 

Eh, I saw a news story out there that says McAfee has the largest share.
I am sure somebody, somewhere did a report that shows Cisco is larger.

Everybody is fighting for their slice of the pie. :-) 

-----------------------------------------------
Andrew Plato, CISSP, CISM
President/Principal Consultant
Anitian Enterprise Security

-----------------------------------------------


 

-----Original Message-----
From: Gary Halleen (ghalleen) [mailto:ghalleen () cisco com] 
Sent: Tuesday, June 06, 2006 7:24 AM
To: Andrew Plato; focus-ids () securityfocus com
Subject: RE: IPS Market Share

It's interesting that different analysts can all come up with different
numbers.  Here's what I saw from Gartner (May 2006):

1.  ISS with 22.2%
2.  Cisco with 16.8%
3.  3COM/TippingPoint with 13.9%
4.  Network Associates with 12.3%
5.  Sourcefire with 8.1%
6.  Juniper with 7.1%

Gary
 

-----Original Message-----
From: Andrew Plato [mailto:andrew.plato () anitian com]
Sent: Monday, June 05, 2006 5:27 PM
To: focus-ids () securityfocus com
Subject: IPS Market Share

Somebody asked a while back about market share and IPSs on this list. I
just got a copy of a report from Infonetics Research. In short here is
how the top IPSs stack up in market share: 

> > > > > QUOTE<<<<<<

TippingPoint (3Com) comes out on top; they have an incredibly high
percentage of customers running their products not only in line, but
running their default recommended settings of over 800 filters (with
minor tweaks); they have a 33% share in 2005, nearly double that of
their next closest competitor

Cisco comes in 2nd overall in 2005 (just barely) with 17% share; we
estimate that just over 50% (though rising quickly) of their customers
use their products in line with a significant number of filters; Cisco's
real strength overall though is in their ability to push IPS technology
through a wide variety of devices beside their dedicated IPS products,
including integrated security appliances, routers, and switches. 

Juniper comes in 3rd overall with a 16% share of revenue, but they have
a very high percentage of customers actually using their products
in-line (second only to TippingPoint)

McAfee and ISS round out the 4th and 5th spots with similar numbers; ISS
has a strong IDS legacy, and though they've been successful selling IPS,
their installed base of happy IDS customers, and their reputation as an
IDS supplier hurts them in this study, and McAfee has established
themselves as a very strong player for high-performance IDS, but hasn't
been as successful moving their customers in line as other vendors in
this space. 
        
(Source, Infonetics Research, Network IPS Market Outlook Report, May 17,
2006) 

> > > > >

This mirrors what I see in the field as well. However, I think Cisco is
big simply because of their domination of enterprise network
infrastructure. People buy Cisco mostly because of the brand name. 
 
There is no mention of Snort or Sourcefire in this analysis. 
 
_____________________________________
Andrew Plato, CISSP
President / Principal Consultant
ANITIAN ENTERPRISE SECURITY

Your Expert Partner for Security & Networking

3800 SW Cedar Hills Blvd, Suite 280
Beaverton, OR 97005
503-644-5656 Office
503-214-8069 Fax
503-201-0821 Mobile
www.anitian.com
_____________________________________

PGP/GPG public key available at: http://www.anitian.com/corp/keys.htm
_________________________________________________
NOTICE:
This email may contain confidential information, and is for the sole use
of the intended recipient.  
If you are not the intended recipient, please reply to the message and
inform the sender of the error and delete the email and any attachments
from your computer. 
_________________________________________________


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------
_________________________________________________
NOTICE:
This email may contain confidential information, 
and is for the sole use of the intended recipient.  
If you are not the intended recipient, please reply 
to the message and inform the sender of the error 
and delete the email and any attachments from 
your computer. 
_________________________________________________


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------