RE: IPS comparison

["Jarmon, Don R" <Don.Jarmon () Intergraph com>]

Interesting entries:

http://www.forescout.com
http://www.arxceo.com

but

The #1 IT pit-fall in the world, is creating a new process as a workaround
for a broke process.  This action can divert critical IT resources away from
problem towards some new gizmo or latest hypeology.  An ineffective or
missing vulnerability management process should not steer focus away by IPS
technologies.

Step 1: Establish security baselines policies for all networked devices
Step 2: Implement security baselines throughout organization
Step 3: Sustain security baselines through deployed life cycles.
Step 4: Reevaluate 

Over 70% of successful Internet attacks involve Web enabled applications.  A
harden Application runs on top of a harden OS that interfaces with a harden
Database.  All interconnected via a harden Network infrastructure.

Ref: http://csrc.nist.gov/pcig/cig.html

According to data from the Computer Security Institute (CSI), 94% of all
exploited networks have deployed some and/or all of the latest security
technologies.  Clearly, firewalls, anti-virus programs, and other security
devices are only part of the solution.

"Enterprises that implement a vulnerability management process that includes
vulnerability assessment, security policy audit and compliance, shielding
and vulnerability mitigation will experience 90 percent fewer successful
attacks than those that make an equal investment only in intrusion detection
systems."

- Mark Nicolett
VP, Security and Privacy, Gartner

-----Original Message-----
From: bw [mailto:bjshhsjb () yahoo com] 
Sent: Monday, July 25, 2005 11:52 AM
To: pen-test () securityfocus com
Subject: IPS comparison

I have been tasked with comparing IPS appliances. I am
seriously looking at top layer's product line and
tipping point. Does anyone have a spreadsheet or know
of any tool they would be willing to share for
comparing products. Im new to this so any help would
be appreciated

thank you

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com