Checkpoint IPS

Roland Dobbins rdobbins at arbor.net
Thu Feb 5 19:59:26 UTC 2015


On 6 Feb 2015, at 2:26, Terry Baranski wrote:

> Zero, on my networks.

Which highlights the importance of broadness of experience, of knowledge 
and understanding of the experiences of others, and understanding of the 
implications of scale.

> If you can't deploy IPS's in such a way that they don't make your 
> network
> less secure via DDoS susceptibility, or reduce availability due to
> non-existent or subpar redundancy/survivability engineering, then you
> shouldn't deploy IPS's.

By their very nature, it's impossible to do so.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>



More information about the NANOG mailing list