Re: CRIME IDS is dead says Gartner

From: VS (VS@private)
Date: Tue Jun 24 2003 - 18:56:01 PDT

  • Next message: Crispin Cowan: "Re: CRIME IDS is dead says Gartner"

    In the message I received, Ryan Thomas writes:
    
    
    >                         The Application Intelligence
    >engine built into Checkpoint NG FP4 promises smarter
    >App layer analysis but I have not yet gotten my hands
    >on it to test. 
    
    And there I was, thinking that AI engine is just Inspect engine with a
    nicer UI and _documentation_!
    
    >                At any rate, I have not yet found
    >anything that pure proxy firewalls such as SideWinder
    >can do that a properly configured Checkpoint can't,
    >unless you need to proxy something other than web
    >services.
    
    Agreed, properly configured FW-1 can do a lot of things that brings it
    close to ALGs. Close but no cigar.
    
    Saso
    (Still CCSA/CCSE, last time I checked.)
    



    This archive was generated by hypermail 2b30 : Tue Jun 24 2003 - 19:06:03 PDT