Re: IPS arguments

[kellstr () gmail com]

First, unless your employer has a contract with the company you should not be involved with pen-testing on them.

As far as why they need it, I would go back to the argument of defense in depth. Each security piece has it's own 
strengths and weaknesses. Having multiple layers should allow the strengths in one layer to cover the weaknesses in 
another. The best argument against this to my mind is complexity, that there are too many different pieces in place for 
the administrative staff to be able to support properly.

Good Luck