Network IPS Market versus UTM

[Ravi Chunduru]

many UTM products are bundling IPS functionality.  what is the effect
of this on standalone IPS device market? It also appears that cost
differential is also small between UTM and standalone network IPS
products.  is standalone network IPS device market on decline?


thanks
Ravi

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------

[Big Foot]

Consider the following situations:

1) I am happy with my current network arrangement and I just wants to
add an IPS device?  

2) In some cases, the UTM device require additional licensing fees to
enable IPS, or even some high end UTM functionality.


On Fri, 2008-01-04 at 09:12 -0800, Ravi Chunduru wrote:

> many UTM products are bundling IPS functionality.  what is the effect
> of this on standalone IPS device market? It also appears that cost
> differential is also small between UTM and standalone network IPS
> products.  is standalone network IPS device market on decline?
>
>
> thanks
> Ravi
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
> to learn more.
> ------------------------------------------------------------------------
>

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------

[globevk]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

UTM Devices offer value for money and ease of enterprise management
rather than dealing with multiple devices and appliances.

In my opinion UTM devices when carefully evaluated might offer
better packet scanning speed than scanned by multiple appliances in
an enterprise.

In the longer term, I do think standalone devices will gain lesser
ground. UTM yields a better return on investment when carefully
selected.

Note: Might be worthwhile to look for central policy group
management, audit capabilities, analytics and administrative
aspects while considering backup servers. You might also want to
check the load factors involved.

Vijay Kakumanu

On Fri, 04 Jan 2008 23:12:33 +0600 Ravi Chunduru
<ravi.is.chunduru@...> wrote:

>many UTM products are bundling IPS functionality.  what is the
>effect
>of this on standalone IPS device market? It also appears that cost
>differential is also small between UTM and standalone network IPS
>products.  is standalone network IPS device market on decline?
>
>
>thanks
>Ravi
>
>-------------------------------------------------------------------

>-----
>Test Your IDS
>
>Is your IDS deployed correctly?
>Find out quickly and easily by testing it
>with real-world attacks from CORE IMPACT.
>Go to
>http://www.coresecurity.com/index.php5?module=Form&action=impact&ca

>mpaign=intro_sfw
>to learn more.
>-------------------------------------------------------------------

>-----
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Charset: UTF8
Version: Hush 2.5

wpwEAQECAAYFAkeAkqoACgkQ1ndFdOJ9oW6tEQP8DZ/7pjhjPLAZ77kWMtXck/Ueb1Jz
2bGfGMkUb5ASBZPFNqwtCBJbujD+XdbjCtIpuwfQAZ2CtfIwhDmBiuT5huFm2TkpLoUi
xO1AMzly98ZzdETrVHqHnyTzlya8zG6J4tG7vsKGNRdHcV51EwrsLPHjo3f2GWMGnq3x
eiJfus0=
=MYk8
-----END PGP SIGNATURE-----

--
Give back to your community.  Click here to start a new career as a Police officer.
http://tagline.hushmail.com/fc/Ioyw6h4dFmXZPyKWG5vjHN7qQ0osDSWoHp7KjG3sfnfZkd53KCR7wW/


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------

[Mark Teicher-2]

I disagree, UTMs usually contain stripped down version or streamlined
version of full blown commercial off the shelf applications.  It has
the least of all worlds and may not function correctly when all
functions are enabled, or one function may work better than another.

The term 'UTM' has been replaced by 'MFS' - Multi-Function Security

On 1/6/08, globevk@... <globevk@...> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> UTM Devices offer value for money and ease of enterprise management
> rather than dealing with multiple devices and appliances.
>
> In my opinion UTM devices when carefully evaluated might offer
> better packet scanning speed than scanned by multiple appliances in
> an enterprise.
>
> In the longer term, I do think standalone devices will gain lesser
> ground. UTM yields a better return on investment when carefully
> selected.
>
> Note: Might be worthwhile to look for central policy group
> management, audit capabilities, analytics and administrative
> aspects while considering backup servers. You might also want to
> check the load factors involved.
>
> Vijay Kakumanu
>
> On Fri, 04 Jan 2008 23:12:33 +0600 Ravi Chunduru
> <ravi.is.chunduru@...> wrote:
> >many UTM products are bundling IPS functionality.  what is the
> >effect
> >of this on standalone IPS device market? It also appears that cost
> >differential is also small between UTM and standalone network IPS
> >products.  is standalone network IPS device market on decline?
> >
> >
> >thanks
> >Ravi
> >
> >-------------------------------------------------------------------
>
> >-----
> >Test Your IDS
> >
> >Is your IDS deployed correctly?
> >Find out quickly and easily by testing it
> >with real-world attacks from CORE IMPACT.
> >Go to
> >http://www.coresecurity.com/index.php5?module=Form&action=impact&ca
>
> >mpaign=intro_sfw
> >to learn more.
> >-------------------------------------------------------------------
>
> >-----
> -----BEGIN PGP SIGNATURE-----
> Note: This signature can be verified at https://www.hushtools.com/verify
> Charset: UTF8
> Version: Hush 2.5
>
> wpwEAQECAAYFAkeAkqoACgkQ1ndFdOJ9oW6tEQP8DZ/7pjhjPLAZ77kWMtXck/Ueb1Jz
> 2bGfGMkUb5ASBZPFNqwtCBJbujD+XdbjCtIpuwfQAZ2CtfIwhDmBiuT5huFm2TkpLoUi
> xO1AMzly98ZzdETrVHqHnyTzlya8zG6J4tG7vsKGNRdHcV51EwrsLPHjo3f2GWMGnq3x
> eiJfus0=
> =MYk8
> -----END PGP SIGNATURE-----
>
> --
> Give back to your community.  Click here to start a new career as a Police officer.
> http://tagline.hushmail.com/fc/Ioyw6h4dFmXZPyKWG5vjHN7qQ0osDSWoHp7KjG3sfnfZkd53KCR7wW/
>
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
> to learn more.
> ------------------------------------------------------------------------
>
>

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------

[globevk]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Well everyones got their opinions. Does make sense to integrate
everything.

When you look at the big picture, security stuff like virus/spams
is an overhead  adding to the overheads in terms of packet
processing. I dont find any logic in having seperate appliances for
each type of vulnerability.

anyway i do feel UTMs have a future.

Vijay K

On Tue, 08 Jan 2008 00:52:37 +0600 Mark Teicher
<mark.teicher@...> wrote:

>I disagree, UTMs usually contain stripped down version or
>streamlined
>version of full blown commercial off the shelf applications.  It
>has
>the least of all worlds and may not function correctly when all
>functions are enabled, or one function may work better than
>another.
>
>The term 'UTM' has been replaced by 'MFS' - Multi-Function
>Security
>
>On 1/6/08, globevk@... <globevk@...> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> UTM Devices offer value for money and ease of enterprise
>management
>> rather than dealing with multiple devices and appliances.
>>
>> In my opinion UTM devices when carefully evaluated might offer
>> better packet scanning speed than scanned by multiple appliances

>in
>> an enterprise.
>>
>> In the longer term, I do think standalone devices will gain
>lesser
>> ground. UTM yields a better return on investment when carefully
>> selected.
>>
>> Note: Might be worthwhile to look for central policy group
>> management, audit capabilities, analytics and administrative
>> aspects while considering backup servers. You might also want to
>> check the load factors involved.
>>
>> Vijay Kakumanu
>>
>> On Fri, 04 Jan 2008 23:12:33 +0600 Ravi Chunduru
>> <ravi.is.chunduru@...> wrote:
>> >many UTM products are bundling IPS functionality.  what is the
>> >effect
>> >of this on standalone IPS device market? It also appears that
>cost
>> >differential is also small between UTM and standalone network
>IPS
>> >products.  is standalone network IPS device market on decline?
>> >
>> >
>> >thanks
>> >Ravi
>> >
>> >----------------------------------------------------------------

>---
>>
>> >-----
>> >Test Your IDS
>> >
>> >Is your IDS deployed correctly?
>> >Find out quickly and easily by testing it
>> >with real-world attacks from CORE IMPACT.
>> >Go to
>>
>>http://www.coresecurity.com/index.php5?module=Form&action=impact&c

>a
>>
>> >mpaign=intro_sfw
>> >to learn more.
>> >----------------------------------------------------------------

>---
>>
>> >-----
>> -----BEGIN PGP SIGNATURE-----
>> Note: This signature can be verified at
>https://www.hushtools.com/verify
>> Charset: UTF8
>> Version: Hush 2.5
>>
>>
>wpwEAQECAAYFAkeAkqoACgkQ1ndFdOJ9oW6tEQP8DZ/7pjhjPLAZ77kWMtXck/Ueb1J

>z
>>
>2bGfGMkUb5ASBZPFNqwtCBJbujD+XdbjCtIpuwfQAZ2CtfIwhDmBiuT5huFm2TkpLoU

>i
>>
>xO1AMzly98ZzdETrVHqHnyTzlya8zG6J4tG7vsKGNRdHcV51EwrsLPHjo3f2GWMGnq3

>x
>> eiJfus0=
>> =MYk8
>> -----END PGP SIGNATURE-----
>>
>> --
>> Give back to your community.  Click here to start a new career
>as a Police officer.
>>
>http://tagline.hushmail.com/fc/Ioyw6h4dFmXZPyKWG5vjHN7qQ0osDSWoHp7K

>jG3sfnfZkd53KCR7wW/
>>
>>
>> -----------------------------------------------------------------

>-------
>> Test Your IDS
>>
>> Is your IDS deployed correctly?
>> Find out quickly and easily by testing it
>> with real-world attacks from CORE IMPACT.
>> Go to
>http://www.coresecurity.com/index.php5?module=Form&action=impact&ca

>mpaign=intro_sfw
>> to learn more.
>> -----------------------------------------------------------------

>-------
>>
>>
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Charset: UTF8
Version: Hush 2.5

wpwEAQECAAYFAkeC7/oACgkQ1ndFdOJ9oW5KmgQAlnnORW8NaA5pZGDNYHrH2WmR5xJY
S2fM2E8bq+mZrmeJP1s/Wdx7u4Fbk39EPQZExKt7snwFVzsHjPPmyNLE0esGQViN/0Zy
PXhik7iCW4Y7LRksWc0LzfJO4QRi4rZEYSCh4+kMVlU3AYuXSXTJbP3I08vTQEHm9aM0
jL8aJSY=
=52tE
-----END PGP SIGNATURE-----

--
Click for free information on accounting careers, $150/hour potential.
http://tagline.hushmail.com/fc/Ioyw6h4dCeTlodDQcW01wpyI4qprjYhhh3K3iVjtepWMn7x4VLFnh4/


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------