Re: IPS arguments

[Javier Reyna <jreyna () onlinet com mx>]

an ISA Server, well, that's one argument to install an IPS. Symantec agents will only protect clients, but what 
about services?  ISA Server will not really protect them. ISA as a firewall, will protect ports not the 
aplication. If some sell me an CISCO IPS I will refuse too!!  I think the best way to realize what IPS protection 
does vs a fw protection is ports vs applications. IPS does a more granular and deep inspection, at last IPS 
analyze payload, enforce RFC, protect against zero days (sometimes). An only-firewall application will not do 
that, IMHO I better change firewall technology Juniper+deepinspection+screen, checkpoint+smartdefense, 
iptables+snortinline, just if the net is not too large. 

On Sat, Feb 14, 2009 at 10:34:52AM -0400, Hugo Vinicius Garcia Razera wrote:
> Hello Gentleman's,
>
> I have finished a penetration testing to a client like a month ago.
> The company i worked for used some practices that i don't agree with.
> that's one of the reasons i resigned. any way they managed to shell
> the audited company a CISCO IPS using the results of the pen test.
>
> Well the thing is that the CIO of that company is refusing to install
> the IPS on their network even after his company has already put a buy
> order for the equipment and said IPS is know on their building but he
> refuses to install such equipment, augmenting that it is totally
> unnecessary because they all ready have an Microsoft ISA server
> Firewall in place, and symantec enpoint protection on the clients
> machine.
>
> Can any one point me why, they need an IPS?
>
> The old company i worked for wants me to penetrate their network, to
> proof them they need an IPS . this time I'm thinking on deploying an
> old Trojan i coded.
>
> but i would like to have more compelling arguments on why some one needs an IPS
>
> thanks for the time replying to my questions
>
> Hugo

-- 
Saludos!
________________

Javier Reyna 
CCSE WCSE ISS-CS NSP JNCIA-FWV
Consultor en Seguridad
jreyna () onlinet com mx
www.onlinet.com.mx
 ,,__
 o" )~
 ''''