Re: IPS Vendor - Customer Experiences

[Sam <wintrmte () gmail com>]

All,

We are starting an evaluation of four IPS vendors and I would like to
solicit your feedback.  Please, if you are a vendor of these products
do not bother emailing me, I will discard them.

If you have used one (or more) of the following vendors IPS products,
I would be interested in hearing your experiences.  Especially
experiences revolving around:

* Managability (policy configurations, etc.)
* Reliability (did it cause any network outages, etc.)
* Rule blocking ability (how effective are the signatures in
protecting your network?  Did the device require fine tuning /
excessive tweaking?)
* Reporting (how are the reports?)

If there's anything I have missed, please feel free to include it.

Here are the list of Vendors:

ISS
McAfee
Tipping Point
SourceFire or Snort
Cisco

Thanks!
-Sam

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------