Paul Melson said:
> On 5/18/07, stursa@695online.com <stursa@695online.com> wrote:
>> Checkpoint has a very similar (i.e. behavioral, not signature-based
>> HIPS)
>> known as "Integrity Secure Client". The management center is
>> stand-alone,
>> costs about $3k IIRC. The client licenses cost less as well. For an
>> additional fee you get point-and-click access to a big database of
>> events
>> and software, so it's much easier to determine whether a particular .exe
>> is safe.
>
> This was originally ZoneLabs' Integrity, and at one point in time was
> the only way to enforce host security policy w/ the Cisco VPN3K. It
> never worked with Check Point until after the acquisition. To be
> honest, I'm a little surprised that after several releases the Cisco
> ASA/VPN3K support is still there.
Not sure if you mean releases of Integrity or releases of Cisco SW. WRT
Cisco, I just checked our 3020 and it's still in there. It's running 4.7,
rel 10 March 2005.
In the next week we're taking delivery of a new 3020, presumably with
latest software. I'll look and see if the support is still there.
I also checked our ASA, which is running 7.2(1), 31 May 2006. It likewise
appears to still support Integrity.
--
Scott L. Stursa
CCNA, MCSA, Security+
_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
|