Monday
Feb042008
IPS/IDS for heavy content site
Monday, February 4, 2008 at 12:40PM
All,
My site would have heavy content (video/pictures). I'm looking for an efficient IPS/IDS solution which would not introduce much of latency. I'm more familiar with Cisco ASA and also familiar with Juniper, Foundry and others. I also came across snort but haven't used it before. I'm more of looking for an appliance (for the ease of configuration,support etc...)
Could any one share their thoughts on performane of IPS/IDS from this vendors?
Thanks!
Janakan Rajendran
My site would have heavy content (video/pictures). I'm looking for an efficient IPS/IDS solution which would not introduce much of latency. I'm more familiar with Cisco ASA and also familiar with Juniper, Foundry and others. I also came across snort but haven't used it before. I'm more of looking for an appliance (for the ease of configuration,support etc...)
Could any one share their thoughts on performane of IPS/IDS from this vendors?
Thanks!
Janakan Rajendran
Reader Comments (8)
Hi Janakan,
As you are looking for a commercial provider, this might be good for you.
They provide you also for insurance
http://www.iris-solution.com/
best regards
Atif,
Thank you for response. I'm looking for a security solution that would be managed internally. Is there any recommendation among Cisco, Juniper, Checkpoint and other providers?
Janakan,
sorry no. havent experience with them.
What kind of threats are you expecting against your site?
What is the webserver that you are running?
You can buy an appliance for Breach Security or implement mod_security if you are using apache on your front ends. http://www.breach.com/
Nothing really beats a
if not intval(id) die "Bye. Id must be an integer";but that might me a topic of another discussion.best regards.
Atif,
Thanks again for your reply. I have apache in the front and I'm worried about DoS and all other common attacks. Breach seems to be interesting and I'd have a look at it.
Thanks again!
Regards,
Janakan Rajendran
Hi Janakan,
I would take a look at NetScaler loadbalancer (Application Accelerator). NetScaler have DoS protection features as well as Application firewall capabilities on top of being a top of the line loadbalancer.
regards,
henrik
My $0.2.
I would advice against going with a product that can do X and Y.
When X breaks you cannot bypass temporarily all traffic to Y.
Probably you don't need any. Realy, no joking.
Thank you for all your replies!
My idea is to have something,
1. That will secure the servers
2. Cost-effective
3. Less effort to setup
4. Good support from Vendor
Based on that, I have breach and netscaler (it has a loadbalancer too-that's nice!). Hope I'd be able use any one of those.