RE: Re: [Snort-devel] IDS vs IPS

["Gordon Cunningham" <gacunningham () bellsouth net>]

Ok, for me, IPS is a class of systems, not a single hardware device.  It
includes firewalls, routers, IDS and whatever convergence of those systems
is seen.  Whether we include security policy in the definition, yes if we
talk about a general enterprise system, no if we refer to hardware devices.

Who coined the term and how do they define it?

- Gordon

"The software said it requires Windows 98 or better, so I installed
Linux..."

 -----Original Message-----
From:   snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]  On Behalf Of Mark Teicher
Sent:   Thursday, August 28, 2003 12:23 AM
To:     twig les; snort-users () lists sourceforge net
Subject:        RE: [Snort-users] Re: [Snort-devel] IDS vs IPS

I am still waiting for people on the list to detail what an IPS actually is
and the underlying technology that makes it so attractive to large
enterprise entities

/mark

At 09:20 PM 8/27/2003, twig les wrote:

> I agree with an early post on this thread that IPS is basically
> a BS marketing term. A buzzword like "B2B". IPS is not a BS
> *concept* but techs can not let marketing ppl define our lingo
> (since they don't understand what they are describing) or we
> risk mass confusion, which it seems is happening here. So IDS
> and firewalls seem to be doing some overlapping functions, good,
> I hope the functionality matures. But I think we should let the
> Powerpoint brigade argue over what to call things in pamphlets.
>
> It's been a long day so this may come across way more
> offensive-sounding than I mean it.
>
> --- Frank Knobbe <frank () knobbe us> wrote:
> > On Thu, 2003-08-28 at 01:46, Gordon Cunningham wrote:
> > > Black Ice Defender did this a few years ago... based on
> > signatures, the
> > > system could detect some attack types and automatically
> > react by preventing
> > > access from the source IP or port for some period of time.
> >
> >
> > Right. But don't you consider BlackICE an IPS instead of a
> > firewall?
> >
> > Regards,
> > Frank
>
> > ATTACHMENT part 2 application/pgp-signature name=signature.asc
>
>
>
> =====
> -----------------------------------------------------------
> Emo is what happens when the glee club goes punk.
> -----------------------------------------------------------
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users