Full Disclosure mailing list archives
Re: Suggestion for IDS
From: Paul Schmehl <pauls () utdallas edu>
Date: Wed, 28 Sep 2005 10:49:04 -0500
--On Wednesday, September 28, 2005 11:37:38 -0400 Valdis.Kletnieks () vt edu wrote:
On Wed, 28 Sep 2005 07:01:34 EDT, "J. Oquendo" said:While I do agree with the statement made "Quite frankly, anybody who already has a PIX installed and wants to install an IPS needs to quantify *exactly* what protection the PIX is failing to provide before they go shopping for anything" to a degree, I also disagree with that statement since it eludes to the thinking that solely a PIX will save your ass. It won't, nor will any other firewall, nor will any other product combined with any OTHER product and so on.Obviously, the original poster isn't thinking that a PIX will save their ass, because they're in the market for something in addition :) They should be figuring out *why* they need more protection (quite frankly, for many places, a *properly configured and maintained* PIX is quite sufficient),
Not only was the PIX (for us) not sufficient, it wasn't robust enough. We're ditching our PIXes for OpenBSD and pf.
If you NAT a lot, PIX can't handle the load. It also isn't flexible enough. Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu/ir/security/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Suggestion for IDS, (continued)
- Re: Suggestion for IDS Reto Inversini (Sep 28)
- RE: Suggestion for IDS Randall M (Sep 29)
- Re: Suggestion for IDS Paul Schmehl (Sep 28)
- Re: Suggestion for IDS Kevin Pawloski (Sep 28)
- Re: Suggestion for IDS Lew Wolfgang (Sep 28)
- IDS features (was: Suggestion for IDS) Alejandro Barrera (Sep 28)
- Re: IDS features (was: Suggestion for IDS) Kevin Pawloski (Sep 28)
- Re: Suggestion for IDS Kevin Pawloski (Sep 28)
- Re: Suggestion for IDS Paul Schmehl (Sep 28)
- Re: Suggestion for IDS Valdis . Kletnieks (Sep 28)
- Re: Suggestion for IDS Paul Schmehl (Sep 28)
- Re: Suggestion for IDS Michael Holstein (Sep 28)
- Re: Suggestion for IDS Paul S. Brown (Sep 28)
- Re: Suggestion for IDS Michael Holstein (Sep 28)
- Re: Suggestion for IDS Paul S. Brown (Sep 28)
- Re: Suggestion for IDS Valdis . Kletnieks (Sep 28)
- Re: Suggestion for IDS Michael Holstein (Sep 28)
- Re: Suggestion for IDS Valdis . Kletnieks (Sep 28)