RE: recommendations regarding IPS

Tipping Point IPS is the gold standard these days. Signature-based, which annual fee to get the signatures. Signatures are usually weekly at a minimum. I use the Unity 50, but they do have Gbps IPS. All of their IPSes are "bump-in-the-wire" which means that you do not have to assign an address (operates at layer2 instead of layer 3). Edward W. Ray CISSP, MCSE+Security, P.E., SANS GCIA Gold, SANS GCIH Gold President NetSec Design & Consulting http://www.netsecdesign.com (714) 997-9226