RE: CISCOs new IPS

["Gary Halleen" <ghalleen () cisco com>]

Aruna,

Cisco signatures are updated very regularly, often daily.  You can view the
current and past updates by visiting:
http://www.cisco.com/pcgi-bin/front.x/ipsalerts/ipsalertsHome.pl


Gary

 

-----Original Message-----
From: aruna [mailto:arunah () slt lk] 
Sent: Tuesday, February 01, 2005 12:09 AM
To: Mike Johnson; ghalleen () cisco com
Cc: focus-ids () securityfocus com
Subject: Re: CISCOs new IPS

DearAll

Does any one has an experience on CISCO IDS .

Do they have regular updates and processor capability etc is preferred.


Regards

aruna
----- Original Message -----
From: "Mike Johnson" <mike () enoch org>
To: <ghalleen () cisco com>
Cc: <focus-ids () securityfocus com>
Sent: Sunday, January 30, 2005 1:00 AM
Subject: Re: CISCOs new IPS


> Gary Halleen (ghalleen) wrote:
> > Actually, that's not quite correct, Billy?
> >
> > Cisco IPS 5.0 is just around the corner, and is a full-fledged
> > appliance-based IPS product.  It will support various drop actions, as 
> > well
> > as traffic normalization and antivirus/antiworm.
>
> Can you explain this a little more?  We have a few 4240's in place now 
> (not inline, obviously), and we're looking forward to 5.0 (though getting 
> more and more annoyed at the slipping ship dates), so I'd love to go ahead

> and get a head start on some of the new features.
>
> And while I'm at it, am I totally missing a way to get a look at the 
> actual packets that trigger the alerts?
>
> Mike
>
> --------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from 
> CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
> to learn more.
> --------------------------------------------------------------------------

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------