RE: For those of you that don't know....

[Sinan Eren <sinan.eren () immunitysec com>]

> It was a joke because for the life of me I can't understand why you
> would recommend something that is trivial to evade.

ok ok np. i dont handle teasing in english very well, try portuguese 
next time.

i thought i did explain why so. i will repeat once again later ...

> There are two other vendors I can think of off the top of my head. 

are these vendors on the host or on the network ? if on the network i 
would love to hear who they are. Once again sitting on the host do not 
impress me much. (especially if you have 1000s of servers/workstations in 
the organization)


> It sounds like you are confusing the IPS space with behavior based or
> "anomaly based IPS." They are two different things.

Why so ? I dont really care how you do your prevention and detection. 
What matters is, are you on the host or on the network ? that N and H 
prefacing the IPS matters for me. how you achieve prevention is not a 
concern to what i was suggesting.

> I will right after you tell me what Tippingpoint is better at doing than
> other vendors?

successful deployment.


> > -----Original Message-----
> > From: Sinan Eren [mailto:sinan.eren () immunitysec com] 
> > Sent: Monday, December 13, 2004 2:39 PM
> > To: Maynor, David (ISS Atlanta)
> > Cc: dailydave
> > Subject: Re: [Dailydave] For those of you that don't know....
> >
> > > Who knew PCRE was worth that much?
> >
> > Compared to other marketed NIDS/NIPS tippingpoint was doing a much
> > better 
> > job. So it did not suprise me much.
> >
> > Same could be said for Determina being so much better than all the
> other
> > marketted HIPS out there. So i expect to see some big acquisition in
> > that 
> > too. 
> >
> > I would personally pick tippingpoint and determina if i was in a CSO 
> > or similar position. So standing from a technical point of view I
> would 
> > endorse both of these products.
> >
> > cheers,
> > Sinan
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave