RE: High Performance IDS's

["Palmer, Paul (ISSAtlanta)" <PPalmer () iss net>]

Do you want systems that can monitor a GigE network or do you want
systems that can monitor 1000 or 2000 Gb/s (that is 100% of a full
duplex GigE link)? There are many more vendors that interpret GigE
capable to mean that they can read from a GigE network than there are
that can handle all of the traffic on those same networks.

ISS has several solutions rated for more than 1000 Gb/s that have had
their performance independently verified. During the last tests they
actually did drop a small percentage of packets when the network was
saturated with very small UDP packets, but this has only ever occurred
in a special lab test environment.

Paul

Disclaimer: I work for ISS. I am not authorized to speak on behalf of
the company, but I am biased in favor of our products and heartily
recommend them.

-----Original Message-----
From: Richard Worwood [mailto:mlists () tdbnetworks org] 
Sent: Wednesday, January 07, 2004 2:06 PM
To: focus-ids () securityfocus com
Subject: High Performance IDS's

I was wondering if anyone had any recommendation for GigE capable
systems?


------------------------------------------------------------------------
---
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
---------------------------------------------------------------------------