IDS: RE: IPS Reliability/Availability

From: Chris Serafin <chris_at_chrisserafin.com>
Date: Thu, 2 Feb 2006 15:51:25 -0600

I know from the short time I worked for a Juniper reseller, the Juniper IPS
has a separate box [very small] that does like a HA link to the IPS, so if
the IPS fails, the traffic routed straight throught the network with no IPS

Chris Serafin
IT Security / VoIP Engineer
chris_at_chrisserafin.com

-----Original Message-----
From: geek_brigades_at_yahoo.com [mailto:geek_brigades_at_yahoo.com]
Sent: Thursday, February 02, 2006 10:27 AM
To: focus-ids_at_securityfocus.com
Subject: IPS Reliability/Availability

I am working on a big IPS project and I am very concerned about installing
an inline device in a core enterprise network, where these devices have the
potential to create big time network outages.

Can you, please, share your possible bad experiences about the reliability
of the following inline IPS products:

ISS
TippingPoint
Juniper IPS
Sourcefire
McAfee IntruShield

Have you had any issues with the availability of these devices, such as fail
close crashes or do you have any experience with bypass switches that would
mitigate the availability issue?

Thanks,
Mike

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------

------------------------------------------------------------------------
Test Your IDS