IDS mailing list archives
RE: Fortinet IDS
From: "Craig Bumpstead" <cbumpste () praxsus dyndns org>
Date: Mon, 26 Jul 2004 11:11:08 +1000
Kyle, I put one in, at my previous place of employment, however due to budget restrictions they were unable to purchase a Fortigate 1000, which they needed. So when the IDS (Ver. 2.50) was turned on, the throughput wasn't as good. So we ended up just using the AV, firewall and VPN. In regard to a limit of 10MB for AV scanning, in my career I have never seen a 10Mb virus, this is not to say that it isn't possible. By imbedding a virus/Trojan in another file. So I would suggest that you need to be careful about the load of the device once real traffic is run through it. I personally like them; especially that it is an all in one package. To some that is a minus. But if redundancy is an issue then buy 2 of them and have them in fail-over mode. Hope this helps, Cheers Craig -----Original Message----- From: Teicher, Mark (Mark) [mailto:teicher () avaya com] Sent: Monday, 26 July 2004 4:05 AM To: Kyle Maxwell; focus-ids () securityfocus com Subject: RE: Fortinet IDS Yes, The AV scanning is limited to 10 MB per file, if a file is greater than 10MB, the performance is dramatically impacted. /mark -----Original Message----- From: Kyle Maxwell [mailto:krmaxwell () gmail com] Sent: Wednesday, July 21, 2004 01:48 PM To: focus-ids () securityfocus com Subject: Fortinet IDS Does anyone on the list have any experience with the Fortinet products, especially the IDS/IPS (and potentially antivirus blocking)? Any thoughts? I've read some reviews and the ICSA Labs report but would be interested to hear from folks here on the list. -- Kyle Maxwell krmaxwell () gmail com ------------------------------------------------------------------------ -- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------ -- ------------------------------------------------------------------------ -- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------ -- -------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
Current thread:
- Fortinet IDS Kyle Maxwell (Jul 25)
- <Possible follow-ups>
- RE: Fortinet IDS Teicher, Mark (Mark) (Jul 25)
- RE: Fortinet IDS JAVIER OTERO (Jul 26)
- RE: Fortinet IDS Craig Bumpstead (Jul 26)
- Re: Fortinet IDS nick black (Jul 27)
- RE: Fortinet IDS travis . alexander (Jul 26)
- RE: Fortinet IDS Jason J. W. Williams (Jul 27)
- RE: Fortinet IDS Ron Gula (Jul 27)