RE: To test IPS/IDS box.

["Srinivasa Addepalli" <srao () intoto com>]

***My earlier email bounced back and hence resending it. I am sorry if you
receive this email twice.

Hi Paari,


You saw many good replies on tools and methodologies.  Another important
aspect in testing is to measure the performance and ensure that it satisfies
the target network requirements. Many IPS vendors tend to give UDP
performance numbers. It is a good metric which provides the capability of
hardware and software. But, any typical network will not have just UDP
traffic. Hence, you need to test and evaluate IPS/IDS with respect to
different protocols such as HTTP, SIP, RTP, FTP, SMTP, IMAP, POP3 etc..
Typical metrics one would like to get for each protocol is - Throughput,
Connection rate, Latency and jitter.  IXIA and SmartBits are some of the
commercial boxes you can use to measure these.

 

Thanks

Srini


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Paari
Sent: Monday, May 05, 2008 12:19 AM
To: focus-ids () securityfocus com
Subject: To test IPS/IDS box.


Hi guys,

   Can you please give me some reference or links  on how to test IPS/IDS
hardware box.


Thanks,
Paari
-- 
View this message in context:
http://www.nabble.com/To-test-IPS-IDS-box.-tp17053955p17053955.html
Sent from the IDS (Intrusion Detection System) mailing list archive at
Nabble.com.


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=in
tro_sfw 
to learn more.
------------------------------------------------------------------------


********************************************************************************
This email message (including any attachments) is for the sole use of the intended recipient(s) 
and may contain confidential, proprietary and privileged information. Any unauthorized review, 
use, disclosure or distribution is prohibited. If you are not the intended recipient, 
please immediately notify the sender by reply email and destroy all copies of the original message. 
Thank you.
 
Intoto Inc. 


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------