nanog mailing list archives

Re: Checkpoint IPS


From: "Roland Dobbins" <rdobbins () arbor net>
Date: Fri, 06 Feb 2015 02:59:26 +0700


On 6 Feb 2015, at 2:26, Terry Baranski wrote:

Zero, on my networks.

Which highlights the importance of broadness of experience, of knowledge and understanding of the experiences of others, and understanding of the implications of scale.

If you can't deploy IPS's in such a way that they don't make your network
less secure via DDoS susceptibility, or reduce availability due to
non-existent or subpar redundancy/survivability engineering, then you
shouldn't deploy IPS's.

By their very nature, it's impossible to do so.

-----------------------------------
Roland Dobbins <rdobbins () arbor net>


Current thread: