Intrusion Prevention System 5

[ksweeney]

Any recommendations on an IPS? We have 900 users, 100 servers and need something easy to use since we don't have enough people or time to be an expert.

Thank you,
Kevin Sweeney

 

[tfg13]

Are we talking a budget? If so, you can look into ISS's products. Pricey, but effective. Even Sourceforge has IPS products. Not sure about the price though.

Snort also has the capability, although I'd be weary of some of the "protection schemes".

http://www.snort.org/archive-1-1955.html

 

[ksweeney]

So far no budget restrictions. Looking to stem the attacks.

 

[jfwebber]

Also take a look at SecureWorks.

Jim W MCSE CCNA
Network Manager

 

[TreyJ]

We use Tippingpoint. They work quite well and are very tweakable.

 

[Hondy]

you could ask your ISP if they offer the service and let them manage attacks, or maybe use Cisco Guard IPS

Cheers

 

[Knackster]

What firewall product are you currently using? most of todays firewalls have the capability of IPS with just a software upgrade.

I run Watchguard's x750e Firebox with the unified threat management package which includes IPS.

I love it. One box handles firewall, gateway A/V, IVS, and spammage.

Chris
IT Manager
Houston, Texas

 

[burtsbees]

A Cisco ASA is a very good choice for a firewall and VPN device.

Burt

 

[OneMixDJ]

If your network layout includes a Cisco 6509, you can also get a Firewall Switch Module (FWSM) that installs right into the 6509.

 

[burtsbees]

Those firewall modules run about $35,000

Burt