topic Re: PIX and IDS in Network Security

PIX and IDS

ralph.rye — Fri, 21 Feb 2020 05:47:17 GMT

Anyone out there using the new IDS features on a PIX?

How has it worked out?

Have you done any testing to ensure the IDS is catching attacks?

bbaley — Tue, 10 Apr 2001 14:52:48 GMT

We’ve also been considering IDS now that PIX supports it. Have you purchased it? Have you been running into any problems?

yv — Thu, 31 May 2001 02:27:49 GMT

Ralph,

I did not use it yet.

But i think it can effect your pix in the performance since it would have to inspect every packet based on the imbedded signatures of its IOS.

As an alternative, get a separate unit to do IDS. for ex: you can get a linux box and run snort (free). It has i think over 300 signatures.

Yury

Medical informatics analyst

jtiso — Thu, 31 May 2001 18:46:02 GMT

you get what you pay for (free -snort). yeah, thats exactly what I'd want to do, run my IDS on one of the world's most insecure OS's.

PIX IDS works fine and doesn't appear to slow down performance. If you want full featured IDS, get a full IDS sensor.