OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: ATM IDS solutions
From: Ron Gula (rgulaNETWORK-DEFENSE.COM)
Date: Thu Nov 16 2000 - 13:04:39 CST

As a general rule, I would not be replying to this email on this
list, except for the fact it was also CCed to this list. I think
potential customer/vendor conversations should be kept off the
list. Now onto a response ;)

At 09:48 AM 11/16/00 +0100, you wrote:
>We are an ISP and are interested in ATM 310 Mbits
>(2 link of 155), can your product do the IDS
>job on such link ?

We have a lot of confidence in the Dragon Sensor Appliance working
at those data rates, but we need to see some traffic profiles.
For example, if 100 Mb of your traffic was fragmented, it may not
perform nearly as well. I've seen some major ISPs where over 20%
of their traffic was fragmented. We have not had an ATM customer
with an OC-3 link where we could not get the Dragon Sensor to keep
up with the traffic or number of sessions.

>Elsewhere, we'll have to put the IDS on a gigabits link.
>For at least 310 mbits... Is there a real solution for that ????

Unless your link is 100% saturated in both directions, you probably
have less than 310 Mb/s aggregate. Regardless, we have solid experience
deploying IDS solutions on ATM links. For what it is worth, some ATM
switches support GigE spanning ports which can be used with our
software solutions. The ATM solution requires our hardware.

Ron Gula
VP IDS Products
Enterasys Networks
http://www.enterasys.com/ids