advertise
« Handling of Session for a site running from more than 1 data center | Main | Streaming Video on Amazon EC2? »
Monday
Feb042008

IPS/IDS for heavy content site

All,

My site would have heavy content (video/pictures). I'm looking for an efficient IPS/IDS solution which would not introduce much of latency. I'm more familiar with Cisco ASA and also familiar with Juniper, Foundry and others. I also came across snort but haven't used it before. I'm more of looking for an appliance (for the ease of configuration,support etc...)
Could any one share their thoughts on performane of IPS/IDS from this vendors?
Thanks!
Janakan Rajendran

Reader Comments (8)

Hi Janakan,

As you are looking for a commercial provider, this might be good for you.
They provide you also for insurance
http://www.iris-solution.com/

best regards

November 29, 1990 | Unregistered Commenteratif.ghaffar

Atif,

Thank you for response. I'm looking for a security solution that would be managed internally. Is there any recommendation among Cisco, Juniper, Checkpoint and other providers?

November 29, 1990 | Unregistered Commenterrjanakan

Janakan,

sorry no. havent experience with them.

What kind of threats are you expecting against your site?

What is the webserver that you are running?

You can buy an appliance for Breach Security or implement mod_security if you are using apache on your front ends. http://www.breach.com/

Nothing really beats a if not intval(id) die "Bye. Id must be an integer"; but that might me a topic of another discussion.

best regards.

November 29, 1990 | Unregistered Commenteratif.ghaffar

Atif,

Thanks again for your reply. I have apache in the front and I'm worried about DoS and all other common attacks. Breach seems to be interesting and I'd have a look at it.
Thanks again!
Regards,
Janakan Rajendran

November 29, 1990 | Unregistered Commenterrjanakan

Hi Janakan,

I would take a look at NetScaler loadbalancer (Application Accelerator). NetScaler have DoS protection features as well as Application firewall capabilities on top of being a top of the line loadbalancer.

regards,
henrik

November 29, 1990 | Unregistered CommenterAnonymous

My $0.2.

I would advice against going with a product that can do X and Y.
When X breaks you cannot bypass temporarily all traffic to Y.

November 29, 1990 | Unregistered Commenteratif.ghaffar

Probably you don't need any. Realy, no joking.

November 29, 1990 | Unregistered CommenterAnonymous

Thank you for all your replies!
My idea is to have something,

1. That will secure the servers
2. Cost-effective
3. Less effort to setup
4. Good support from Vendor

Based on that, I have breach and netscaler (it has a loadbalancer too-that's nice!). Hope I'd be able use any one of those.

November 29, 1990 | Unregistered Commenterrjanakan

PostPost a New Comment

Enter your information below to add a new comment.
Author Email (optional):
Author URL (optional):
Post:
 
Some HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>