|
Contents |
||||
|
|
||||
|
|
||||
Scenario
This company has become concerned about external attacks and wants to implement a network intrusion detection/prevention system to trace and manage intrusions on its 150-node network.
Concerns: The ability to recognise and block external attacks is the key issue, but the network manager wants to be sure the device can intelligently handle the data to reduce management effort. The ability to integrate with existing network/enterprise management software will also be taken into consideration. Logging and reporting is key for the security team and some forensic analysis functionality would also be great.
Scenario winner: SonicWALL 5060 and Juniper IDP200
The scenario winner this month goes to both SonicWALL and Juniper. While both similarly priced, the SonicWALL, being a UTM, provides a greater range of options relating to other security concerns a SME may have. The Juniper is a dedicated IPS and is better suited to an enterprise that prefers to keep its security systems separate. Both are powerful systems that are easy to use and will reduce the administrative burden. Both are also very good at pin-pointing the exact name/type of attack being launched.
Editor's choice: Juniper IDP200
The Editor's Choice goes to Juniper for their IDP 200. While a little on the pricey side, if an enterprise needs and is looking for a scalable, hardware-based, centrally controlled and logged, dedicated IPS solution with remote management that is powerful yet easy to deploy, then they would be hard pressed to go past the Juniper range.





