IDS/IPS Suggestions?

PeteK · 15th July 2008

Hi.

We have a customer looking for IDS and possibly IPS. Normally we would happily sell them an ASA + AIP module, but the already have a pair of HA 5505's which cost them over 1k and they don't really want to bin them in favour of a pair of 5510s+AIP costing them 5k. Furthermore the Cisco support on HA 5510's with AIP is a fortune too.

The IDS is a compliance requirement and as such I am looking for sensibly priced commercial (not Snort, or at least not Snort on a box I have to build!) IDS type solutions. Its not really my field so suggestions welcome. They are only doing about 1Mb/s car and its not going to increase to anything massive, perhaps 2-3meg but I suspect that will be it.

Anyone any helpful (and ideally cheapish) thoughts please?

Thanks in advance.

freethought · 15th July 2008

Low end Fortinet's? We use them and they rock. Hardware accelerated and a pleasure to manage. They cluster nicely too. You should be able to pick a couple of FortiGate 100As up cheap.
Otherwise a low end 3Com/Tipping Point box should do the trick, not used them but everyone raves about them and they have a nice small (read: low cost) box. Not sure about how to do HA with them though...

PeteK · 15th July 2008

Chap. Thanks, I'll take a look.