Peter Stephenson,CeRNS,
Recent articles by Peter Stephenson,CeRNS,
Review: FortiGate-300A
The FortiGate-300A is a fullfunction
front-end system
for protecting a network
in a way that goes far beyond
intrusion prevention. It also has a
built-in firewall and anti-virus
protection as well as web filtering.
Each port on the unit can be
firewalled with specific rules and
policies, allowing protected
VLANs and isolated networks to
be created.
May 1 2006 12:00AM
Security
Review: InstaGate PRO
The InstaGate has several
interesting features. It can
become more than just a
firewall and IPS, as eSoft offers
different software extensions,
called SoftPaks.
These include
anti-virus, web
filters, and IM
and peer-to-peer
filters. Apart
from being an all-in-one device, it
has a range of customisable reports
and alert logs. It also includes
several real-time monitors and
keeps track of all internal and
external activity.
May 1 2006 12:00AM
Security
Review: Sourcefire 3D IPS1000
The Sourcefire box does all
the things an IPS should
do. It fits comfortably in
the category of an average IPS,
although it must be remembered
that the Sourcefire 3D Suite
includes a ton of IDS, scanning,
and vulnerability management
capability which falls outside the
context of this review. As an IPS,
the box has no standout features,
and nothing specifically separates
it from other IPSs.
May 1 2006 12:00AM
Security
Review: Top Layer IPS 5500-50
This device incorporates
several features in one box.
It has real flexibility, with
fully adjustable and customisable
policies, port configuration, and
management screens. It also offers
several different report types,
which make finding clear information
about attacks or network
activity easy. Reports can also be
created according to a schedule
set by an administrator and saved
on the device for review later.
May 1 2006 12:00AM
Security
Paying the cost to be the boss
In our organizations, we need to take a strong lead in many areas. The first area is awareness. There used to be a commercial where an executive, with a bit of a smirk, tells an IT engineer that he just opened an email attachment — like he was told not to. In our organizations, we know that sort of thing is happening somewhere in the company.
Apr 14 2006 8:14PM
Security
Review: SurfControl Web Filter
This venerable product is, as one would expect from one with its pedigree, fully loaded with features. As well as a full-service customizable URL filter, SurfControl contains an anti-spam agent, spyware shield, instant messaging and peer-to-peer shields, anti-virus, and games protection. The differences between this product and our Best Buys are minimal and we rate SurfControl highly recommended.
Apr 14 2006 12:00AM
Security
Review: Websense Security Suite - Lockdown Edition
This is a very popular product and you can see why from the moment you insert the CD, all the way through to having it completely up and ready for use. Websense is easy to use and configure. The set-up wizard has very clear steps and leaves no doubt to the installer that the program is installing correctly.
Apr 14 2006 12:00AM
Security
Are infosec pros complacent?
I had a very interesting conversation with a colleague recently. He had a disturbing take on the state of information security and, particularly, practitioners (of which he is one). He took the position that security professionals who have been around a while are becoming – no, making themselves – dinosaurs. Having been in this field well over 20 years myself, I, of course, found that a disturbing notion. You know what happened to the dinosaurs. Not a pretty thought.
Feb 7 2006 8:00PM
Security
Review: Auditor Enterprise
NetClarity’s Auditor is a fine example of a fully featured appliance that offers not just vulnerability assessment, but also ties results to compliance and ongoing information systems audit programs. Beginning from the superb documentation and ending with the high value for the money, this product shines.
Feb 1 2006 12:00AM
Security
Review: AZScan
AZScan has a way to go to become a world-class vulnerability assessment tool – the product is not intuitive. First, one needs to know quite a bit about the product being audited. Second, there is no online help or tool tips. Third, the menu choices don’t always behave as expected. Set-up seems easy at first, but details often don’t work.
Feb 1 2006 12:00AM
Security
