RE: CISCOs new IPS

Aruna,

Cisco signatures are updated very regularly, often daily.  You can view the
current and past updates by visiting:
http://www.cisco.com/pcgi-bin/front.x/ipsalerts/ipsalertsHome.pl


Gary

 

-----Original Message-----
From: aruna [mailto:arunah@xxxxxx] 
Sent: Tuesday, February 01, 2005 12:09 AM
To: Mike Johnson; ghalleen@xxxxxxxxx
Cc: focus-ids@xxxxxxxxxxxxxxxxx
Subject: Re: CISCOs new IPS

DearAll

Does any one has an experience on CISCO IDS .

Do they have regular updates and processor capability etc is preferred.


Regards

aruna
----- Original Message -----
From: "Mike Johnson" <mike@xxxxxxxxx>
To: <ghalleen@xxxxxxxxx>
Cc: <focus-ids@xxxxxxxxxxxxxxxxx>
Sent: Sunday, January 30, 2005 1:00 AM
Subject: Re: CISCOs new IPS


> Gary Halleen (ghalleen) wrote:
>> Actually, that's not quite correct, Billy?
>>
>> Cisco IPS 5.0 is just around the corner, and is a full-fledged
>> appliance-based IPS product.  It will support various drop actions, as 
>> well
>> as traffic normalization and antivirus/antiworm.
>
> Can you explain this a little more?  We have a few 4240's in place now 
> (not inline, obviously), and we're looking forward to 5.0 (though getting 
> more and more annoyed at the slipping ship dates), so I'd love to go ahead

> and get a head start on some of the new features.
>
> And while I'm at it, am I totally missing a way to get a look at the 
> actual packets that trigger the alerts?
>
> Mike
>
> --------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from 
> CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
> to learn more.
> --------------------------------------------------------------------------
>
> 

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------