I just got the new issue of SC Magazine for March 2009. In it there is a debate between Alan Shimel of StillSecure and John Viega of Stonewall Software, "Debate >> Small and medium business should deploy and intrusion prevention system". The debate focuses on the value or ROI for IPS in the SMB market.
I could not disagree more with John's position. Basically he is saying, because people do not know how to manage the environment, it should not be considered for their environment. He does have valid points though, that IPS does and can produce thousands of alerts a day, which can be overwhelming. Also, he states that the MSSP market is a $1.3 billion market.
That being said, I would advocate, YES you should have IPS, but you should not try to manage it unless A) you know what you are doing, and B) you have the time to manage it. These are the two biggest factors facing the success of IPS in the SMB space.
Who has the time? With everyone wearing many hats these days, no one has time to be strategic anymore, either they are recationary or tactical, and with IPS that does not cut it. If you find yourself in this predicament, consider using a good MSSP to provide the service for you. StillSecures ProtectPoint Services are not only cost effective, they have the experts running the service for you. So the thousands of alerts that you are looking at can be properly handled by the Experts. Alerts that need to ne acted on can be while those that are false can be managed.
Check out the ProtectPoint solution by StillSecure, if it looks like it might work, dr0p me a line, I can get you to scoop really fast!!! We have a connection for you!
Till next time...............
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment