Re: [FW1] intrusion detection - benifits?

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

Tom,
It is my humble opinion that intrusion detection is a good thing.  I have
recommended it in every situation possible.  Obviously there are monetary
constraints, but I find that most organizations prefer (as do I) to have that
additional bit of help.  IDS is not intended to replace a firewall, but (as you
probably know) to provide additional security on the services allowed into the
network(or dmz.)  The nice part is, if you use the Check Points RealSecure product,
you can have the logs sent to the firewall log, so the additional administration is
limited to the initial setup.

Sorry to be so wordy, but you asked for opinions,

Cheers,
CryptoTech

"Pellowski, Tom" wrote:

> Greetings:
>
> I have this question that I would like the community to give me their .02
> worth.
>
> In an arena running Checkpoint (whatever flavor) is it really worth the
> time, expense, and possible network performance compromises to put a
> separate intrusion detection appliance online in front of the firewall?
>
> I understand that there are tons of "well, you could.." but what I am really
> after is "your" opinion. Would you, as the FW admin/engineer, do it.
>
> Obivously I am looking for some backup here as I am having a intrusion
> detection package rammed down my throat, and frankly, I don't want it. But
> my only defense at this point is that "is something more to manage".
>
> Thanks to all in advance!!!
>
> Tom
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================