Feeds

Cisco IDS gets faster

Intrusion extrusion

  • alert
  • submit to reddit

Internet Security Threat Report 2014

Cisco has boosted the speed and added better management capabilities to its line of intrusion detection products.

Designed for high bandwidth networks, the Cisco IDS 4250 is the firm's first appliance which can work at Gigabit speeds. Along with the high end box, Cisco has introduced an appliance geared to the needs of medium sized companies (the Cisco IDS 4235 - which can work at up to 200Mbps) and a software revamp.

The increased speed makes the appliances capable of monitoring traffic on high-speed intranets and service provider networks, providing defence in depth from security attacks. Users of slower speed products have to use low balancing across a range of IDS servers, an approach that has a higher cost of ownership, Cisco argues.

IDS systems can pick up on threats (such as buffer overflow attacks and Nimda-like worms) that might slip past networks defended only by firewalls.

Cisco IDS software version 3.1 features a new event viewing application that helps threat management and attack mitigation across all Cisco network-based IDS solutions. The networking giant also supplies a range of host-based intrusion detection products.

False alerts are a particular problem for users of IDS systems. Sean Convery, Cisco's manager of technical marketing, said all its appliances now ship with improved management functions to allow the administrator to more easily tune out false alarms.

One way of addressing the false alert issue (and freeing up staff resources) is through managed services but Cisco is not announcing any managed services alliances with the introduction of the appliances.

Other vendors provide Gigabit-capable IDS products and perhaps Cisco's most important differentiator is integration between its IDS appliances and its popular line of PIX firewalls. Outputs from its IDS sensors can be used to reconfigure firewalls.

The Cisco IDS 4250 is shipping with prices starting at $25,000, the Cisco IDS 4235 is also available and costs from $12,500.

Also at the Networld + Interop show in Las Vegas yesterday, Cisco announced an update in its content switching portfolio which, like the IDS announcement, seeks to bolster the company's sales outside it core switching and routing market.

The Cisco CSS 11503 and CSS 11506 modular content switches, introduced yesterday, feature integrated SSL acceleration to speed the processing of secure Web transactions. Cisco also launched a module for its Catalyst line of LAN switches (the Catalyst 6500 CSM 3.1) which allows load-balancing on a wide area network for application like data recovery. Cisco also released software to make it easier to display Web content to wireless phones and handhelds. ®

Related Stories

IDS users swamped with false alerts
ASSAiSSINAiTE all bugs
ISS to acquire Network ICE
Software firewall vendors under sales pressure
3A security software to boom

Choosing a cloud hosting partner with confidence

More from The Register

next story
NSA SOURCE CODE LEAK: Information slurp tools to appear online
Now you can run your own intelligence agency
Azure TITSUP caused by INFINITE LOOP
Fat fingered geo-block kept Aussies in the dark
Yahoo! blames! MONSTER! email! OUTAGE! on! CUT! CABLE! bungle!
Weekend woe for BT as telco struggles to restore service
Cloud unicorns are extinct so DiData cloud mess was YOUR fault
Applications need to be built to handle TITSUP incidents
Stop the IoT revolution! We need to figure out packet sizes first
Researchers test 802.15.4 and find we know nuh-think! about large scale sensor network ops
Turnbull should spare us all airline-magazine-grade cloud hype
Box-hugger is not a dirty word, Minister. Box-huggers make the cloud WORK
SanDisk vows: We'll have a 16TB SSD WHOPPER by 2016
Flash WORM has a serious use for archived photos and videos
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
Do you spend ages wasting time because of a bulging rack?
No more cloud-latency tea breaks for you, users! Get a load of THIS
prev story

Whitepapers

Free virtual appliance for wire data analytics
The ExtraHop Discovery Edition is a free virtual appliance will help you to discover the performance of your applications across the network, web, VDI, database, and storage tiers.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
The total economic impact of Druva inSync
Examining the ROI enterprises may realize by implementing inSync, as they look to improve backup and recovery of endpoint data in a cost-effective manner.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Website security in corporate America
Find out how you rank among other IT managers testing your website's vulnerabilities.