Detection and prevention: 6 intrusion detection systems tested

  Detection & prevention
  Computer Assosiates
  Juniper Networks
  McAfee IntruShield
  McAfee Entercept
  Snort
  SonicWALL

 Specifications
 How we tested
 Sample Scenario
 Final words
 Editor's choice
 About RMIT

How we tested

Interoperability
For software and management tools, what platforms are suppored? For hardware, what ports are provided?

Futureproofing
Is the system scaleable to grow with your needs, and is there a reasonable upgrade path?

ROI
Do the features, usability, and performance justify the price?

Service
What service and maintenance contracts are available? For hardware, what is the warranty?

Testing was relatively tricky as some products were software -- Linux or Windows-based -- and some were hardware appliances. Some incorporated intrusion prevention and some didn't. Computer Associates and SonicWALL sent engineers to the Labs to run us through the installation, configuration and administration of their respective systems before leaving them with us to break on our own. Snort was downloaded, compiled, installed, and run on a Slackware 9.1 machine in the Lab. We visited Juniper Networks and McAfee to look at their hardware IPSes and McAfee provided a copy of Entercept 5.0 for us to install in the Lab on a test server.

Advertisement

Talkback 0 comments

Back to top

Featured