Focus on IDS
IPS Performance Testing (pointer to article) Jul 26 2010 04:15PM
Joel M Snyder (Joel Snyder Opus1 COM) (1 replies)
RE: IPS Performance Testing (pointer to article) Jul 26 2010 06:29PM
Walsh, John (Jack) (jwalsh icsalabs com) (1 replies)
Re: IPS Performance Testing (pointer to article) Jul 26 2010 07:11PM
Mark Teicher (mark teicher gmail com) (1 replies)
RE: IPS Performance Testing (pointer to article) Jul 26 2010 07:28PM
Walsh, John (Jack) (jwalsh icsalabs com) (1 replies)
Re: IPS Performance Testing (pointer to article) Jul 26 2010 11:36PM
Mark Teicher (mark teicher gmail com) (1 replies)
I did read the paper thoroughly, as I had mentioned earlier real world environments that I have been working with involve over 1,000 IPS sensors deployed worldwide, intergrating into a SAN storage

On Jul 26, 2010, at 3:28 PM, "Walsh, John (Jack)" <jwalsh (at) icsalabs (dot) com [email concealed]> wrote:

> Mark:
>
> The paper is applicable in both lab testing environments and real world
> deployments as it talks about the things that impact network IPS
> throughput. Give it a read and let me know whether or not it was
> helpful.
>
> http://www.icsalabs.com/technology-program/network-ips/papers-multimedia

>
>
> Take care,
> Jack
>
>> -----Original Message-----
>> From: Mark Teicher [mailto:mark.teicher (at) gmail (dot) com [email concealed]]
>> Sent: Monday, July 26, 2010 3:12 PM
>> To: Walsh, John (Jack)
>> Cc: focus-ids (at) securityfocus (dot) com [email concealed]
>> Subject: Re: IPS Performance Testing (pointer to article)
>>
>> But is the performance results based on lab testing or real
>> world deployments? If only lab testing or captures from
>> corporate live environments then may not apply to
>> large/enterprise environments with more than 2,000 IPS
>> devices deployed globally. Some Fortune 10 companies have
>> deployed over 16,000 IPS sensors, the results did not account
>> for rolling/tuned IPS policies over a 12 month period
>>
>>
>>
>> On Jul 26, 2010, at 2:29 PM, "Walsh, John (Jack)"
>> <jwalsh (at) icsalabs (dot) com [email concealed]> wrote:
>>
>>> Similar to the article mentioned below, I wrote a paper entitled,
>>> "Factors Affecting Network IPS Throughput". It too may be
>> helpful. You
>>> can find that as well as some other related
>> papers/presentations here:
>>>
>>>
>> http://www.icsalabs.com/technology-program/network-ips/papers-
>> multimedia
>>>
>>> Take care,
>>> Jack Walsh
>>> Anti-Spam and Network IPS Program Manager
>>> ICSA Labs
>>> 717.790.8126
>>>
>>>
>>>> -----Original Message-----
>>>> From: listbounce (at) securityfocus (dot) com [email concealed]
>>>> [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of Joel M Snyder
>>>> Sent: Monday, July 26, 2010 12:16 PM
>>>> To: focus-ids (at) securityfocus (dot) com [email concealed]
>>>> Subject: IPS Performance Testing (pointer to article)
>>>>
>>>> I don't normally shill my own stuff, but this article came
>>>> out today and
>>>> it is entirely apropos to the discussion we have been having
>>>> about IPS
>>>> performance testing (although I wasn't thinking 10G when I
>>>> wrote it, I
>>>> admit).
>>>>
>>>> http://searchmidmarketsecurity.techtarget.com/tip/0,289483,sid
>>>> 198_gci1349879_mem1,00.html
>>>>
>>>> "IPS performance is something you can't afford to get wrong.
>>>> Unfortunately, performance is difficult to test, and the
>> results are
>>>> almost as hard to describe. As IPS moves further up the
>>>> network stack,
>>>> performance becomes highly data-dependent. This is different
>>>> from what
>>>> we're used to witnessing in the world of switches and
>> routers, where
>>>> performance is easy enough to describe. ..."
>>>>
>>>> Apologies to anyone who is offended by the pointer.
>>>>
>>>> jms
>>>>
>>>> --
>>>> Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719
>>>> Senior Partner, Opus One Phone: +1 520 324 0494
>>>> jms (at) Opus1 (dot) COM [email concealed] http://www.opus1.com/jms
>>>>
>>>> -----------------------------------------------------------------
>>>> Securing Your Online Data Transfer with SSL.
>>>> A guide to understanding SSL certificates, how they operate
>>>> and their application. By making use of an SSL certificate on
>>>> your web server, you can securely collect sensitive
>>>> information online, and increase business by giving your
>>>> customers confidence that their transactions are safe.
>>>> http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;
>>>> 9a80e04e1a17f194
>>>>
>>>>
>>>>
>>>
>>> -----------------------------------------------------------------
>>> Securing Your Online Data Transfer with SSL.
>>> A guide to understanding SSL certificates, how they operate
>> and their application. By making use of an SSL certificate on
>> your web server, you can securely collect sensitive
>> information online, and increase business by giving your
>> customers confidence that their transactions are safe.
>>>
>> http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;
>> 9a80e04e1a17f194
>>>
>>>
>>

-----------------------------------------------------------------
Securing Your Online Data Transfer with SSL.
A guide to understanding SSL certificates, how they operate and their application. By making use of an SSL certificate on your web server, you can securely collect sensitive information online, and increase business by giving your customers confidence that their transactions are safe.
http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;9a80e04e1a
17f194

[ reply ]
RE: IPS Performance Testing (pointer to article) Jul 27 2010 05:12PM
Jay Kerby (jkerby baynote com)


 

Privacy Statement
Copyright 2010, SecurityFocus