Reputation based IPS/IDS - Cisco's tested

Joel Snyder <[email protected]> Tue, 11 Aug 2009 17:49:00 +0200
Newsgroups gmane.comp.security.ids
Message-ID <[email protected]>
Some of you may remember our discussion back in November, 2008 about 
using reputation services in IPS.  (search for subject line "Email 
reputation for inout to IDSs?" if you want to read it).

Anyway, I was given a chance to test Cisco's 7.0 IPS that includes the 
Ironport SenderBase/SensorBase reputation service, and Network World 
just published the test.  Since we discussed the technology (and how no 
one was actually doing it) on this list, here's a link to how Cisco is 
finally doing something about it, and what they're doing:

http://www.networkworld.com/reviews/2009/081009-cisco-intrusion-prevention-system-test.html

Best regards,

jsm

-- 
Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719
Senior Partner, Opus One       Phone: +1 520 324 0494
[email protected]                http://www.opus1.com/jms

-----------------------------------------------------------------
Securing Your Online Data Transfer with SSL.
A guide to understanding SSL certificates, how they operate and their application. By making use of an SSL certificate on your web server, you can securely collect sensitive information online, and increase business by giving your customers confidence that their transactions are safe.
http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;9a80e04e1a17f194