Re: Firewall and IPS Deployment

[Javier Reyna <jreyna () onlinet com mx>]

IMHO 
I think is fine to have some IPS functionalities in a firewall, afterall , firewalls will evolve somehow. 
But this builtin IPS functionality, is never so acurae as a dedicated system. Talking about Checkpoint, I like some 
features from SmartDefense, but, if SD is extensible used, FW-1 will crash some things. let an IPS do IPS 
job, and Firewall to do FW job.  Nowadays, venders are affering a lot of UTM appliances, firewall, ips, 
antispam, antivirus, antieverything, capuchinno, machiato and esspresso. At the end of the day you disable the 
half of properties, because the trouhgput became mayhem.

On Tue, Feb 17, 2009 at 06:34:20PM -0500, David Gadoury wrote:
> I'll piggy back on this question. What are the lists thoughts IPS
> built into firewalls?
>
> Thanks
>
> On Fri, Feb 13, 2009 at 2:36 AM, Ressa <ressa4299 () yahoo com> wrote:
> > Hi,
> >
> > i was wondering is there any consideration for deploying firewall and IPS. If the IPS should in front of firewall 
> > or behind the firewall, and please also add the pros and cons.
> >
> > Regards,
> >
> >
> > Ressa
> > Registered Linux User Number 336566
> > Linux Newbie
> >
> > The information is provided as is without warranty of any kind. In no event shall the writer be liable for any 
> > incidental, indirect or consequential damages of any kind, including, but not limited to : loss of business 
> > profits, police knocking on your door, computer crashes, sharks attack, temporary short-term memory loss (some 
> > cases reported recently), death of your pet or alien invasion...

-- 
Saludos!
________________

Javier Reyna 
 ,,__
 o" )~
 ''''