IDS mailing list archives

Re: New IPS group test report


From: Bob Walder <bwalder () spamcop net>
Date: Tue, 25 Jan 2005 16:37:43 +0100

We didn't test other IDS vendors because it was an IPS test.

We DID test more IPS vendors but not all of them made it into the report.
Because of the amount of time we spend on testing each product, 9-10 vendors
is about the limit of the number we can test and still bring out the report
in a timely manner.

FYI, we start testing for Edition 3 immediately, and that currently
includes:

 Checkpoint
 Cisco
 Intoto
 Juniper
 Lucid
 Radware
 Westline
 And potentially 3 others yet to be announced

We then follow that with our Multi-Gigabit IPS test (carrier
class/enterprise) with devices ranging from 2Gbps to a claimed 10Gbps from:

 McAfee
 Radware
 SecureSoft
 TippingPoint
 Top Layer
 And potentially 2 others yet to be announced

Bob Walder


On 25/1/05 3:58 pm, "Clemens, Dan" <Dan.Clemens () healthsouth com> wrote:



I guess what I don't get is why didn't you test other ids manufactures on the
market also?

Why did you only test the vendors mentioned below?

-Dan

-----Original Message-----
From: Bob Walder [mailto:bwalder () spamcop net]
Sent: Mon 1/24/2005 2:59 AM
To: Focus-Ids Mailing List
Cc:

Subject: New IPS group test report
For those who are interested, we just published Edition 2 of our IPS group
test report.

For this edition we had methodologies for both content-based and rate-based
(attack mitigation) IPS - one product was tested against both. Five made it
into the final report:

Content-based:

Broadweb NetKeeper
Fortinet FortiGate
SecureSoft Apsolute IPS
Top Layer IPS 5500

Rate-based:
Top Layer IPS 5500
V-Secure V-100

The report can be viewed on-line (with no pesky registration forms!) at
www.nss.co.uk/ips

As with Edition 1, the entire report is up there barring only the benchmark
results tables.

Hope you find it useful

Bob Walder
The NSS Group



--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from

CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708

to learn more.
--------------------------------------------------------------------------




Confidentiality Notice: This e-mail communication and any attachments may
contain

confidential and privileged information for the use of the designated
recipients named above. If

you are not the intended recipient, you are hereby notified that you have
received this

communication in error and that any review, disclosure, dissemination,
distribution or

copying of it or its contents is prohibited. If you have received this
communication in

error, please notify me immediately by replying to this message and deleting
it from your

computer. Thank you.



--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------


Current thread: