Penetration Testing mailing list archives

Re: IPS comparison

From: joekim13 () securityfocus com, at () securityfocus com, gmail () securityfocus com
Date: 29 Jul 2005 19:32:52 -0000

Checkout Symantec's SNS , protocol anomaly + stateful signatures and updates via liveupdates

3com Tipping Point is also nice. 

Yes you can configure this with out IP's to make them invisible

btw, all IPS,IDS should be configured in promisc mode w/ no ip. and mgmt traffic on a seperate interface. The above 
statement was a joke as some people tend to think you must put IP's on all boxes,

Current thread:

Re: IPS comparison, (continued)
- - Re: IPS comparison Chuck (Jul 27)
- RE: IPS comparison Soszynski, Chris (Jul 27)
- RE: IPS Comparison JP Garcia (Jul 27)
  - RE: IPS Comparison Miguel Dilaj (Jul 27)
    - Re: IPS Comparison Ivan C (Jul 29)
- RE: IPS comparison Gregory D. McPhee (Jul 27)
  - Re: IPS comparison Ivan C (Jul 28)
  - Re: IPS comparison Joey Peloquin (Jul 30)
    - Re: IPS comparison Daniel Cid (Jul 30)
- Fw: IPS comparison OguzTekeli (Jul 28)
- Re: IPS comparison joekim13 (Jul 30)
- RE: IPS comparison Jarmon, Don R (Jul 31)