Tags: analysis tools, architecture, footprint, gold support, group test, ips products, ly, noticeable changes, perspective, peter stephenson, priate, sensors, silver and gold, threat management, ty, utm, web software, white papers,
» GROUP TEST|IDS/IPS
There are fewer real IDS/IPS products in the market as functionality continues to
move toward UTM, but there are still some good products, says Peter Stephenson.
T
his year there are two ality trend. There are fewer real multiple sensors, but the emerging
noticeable changes in IDS/IPS products in the market. architecture of separating the con-
IDS/IPS products. First, the But, there still are very credible trol center from the sensors is a
footprint we are seeing is decidedly IDS/IPS products, and from our step forward.
distributed. Second, the functionali- perspective, that's a good thing. The products are becoming
ty continues to approach universal The use of a distributed IDS/IPS more versatile, more powerful
threat management. is a step forward for most large as analysis tools, and more
There is another trend that, real- enterprises. To date there have distributed. And that's good
ly, is an outgrowth of the function- been ways to gather data from news, indeed.
NitroGuard IPS
priate IPS architecture. One man- variety of options. For all users A solid product
ages the appliance remotely from a there are two sections of the web-
software console that comes with it site with such things as manuals with lots of features,
and there is an installation guide and white papers. All one needs to including near
for the console. If the organization do is sign up. In addition there are
has the rest of the NitroView suite extra cost silver and gold support
real-time dashboard
Vendor NitroSecurity Inc. installed, the same console can be packages with a huge assortment refresh.
Price $10,495 (Enterprise Security
used for all obviating separate con- of services, including advance
Manager deviceadds $19,995)
sole installations. hardware replacement and two-
Contact www.nitrosecurity.com
We installed the IPS with the hour response (gold).
Peter Stephenson
rest of the suite -- NitroView Priced at $10,495, the
T
he NitroGuard IPS is part Receiver and NitroView NitroGuard is at the low end of
of the NitroView suite of Enterprise Security Manager the range. The ESM offers an
products available from (ESM) -- easily and tested with enhanced level of analysis and
NitroSecurity. It is one of a hand- our Attack Pod. The results were adds $19,995.
ful of IPS products that allows excellent with the product identi-
detailed analysis of fying our attacks at all levels and SC MAGAZINE RATING
captured events. delivering its results to the ESM Features #####
When used with for analysis in near real time. Set- Ease of use #####
the rest of the suite, up and rule generation is straight- Performance #####
it has extensive forward and the use of wizards Documentation #####
analysis capability beyond that and menus eases the process. Support #####
normally found in an IPS. The Documentation is complete and Value for money ##### #
IPS's near real-time dashboard comes on a separate CD. The main OVERALL RATING #####
updates as new alerts arrive, rather documentation includes all of the Strengths A solid product with lots of
than using a refresh cycle that does pieces of the NitroView suite so features, including near real-time dash-
board refresh.
batch updating. We saw this in interconnection and interoperation Weaknesses None that we could find.
only one other product. is clearly presented in a single doc- Verdict A solid product with good
The product is easy to install ument. The PDF file is well integration to other NitroView products,
and comes with a small installation indexed and the information we though a bit high priced in its full
guide that, though small, provides needed was very easy to find. configuration with the ESM. For its
excellent performance, ease of use and
a good level of detail in such Keyword/phrase searches, of flexibility we award NitroView IPS our
things as physical installation, course, are standard in PDF files. Recommended rating.
cabling and selection of an appro- Support offerings are rich with a
NitroSecurity, Inc.
230 Commerce Way, Suite 325
Portsmouth, NH 03801
www.nitrosecurity.com
800.795.IPS1
SC · August 2007 · www.scmagazine.com Copyright Haymarket Media Inc.