Juniper, Cisco all-in-one devices hit on intrusion-prevention controls

摘要

Juniper Networks' ISG-1000 and Cisco's ASA5540 with its add-on SSM-20 IPS module offer no-compromise IPS products that will make the security purist happy with their configurability and control features. We rank the ASA5540 slightly behind the ISG-1000 because of Cisco's fairly loose linkage between firewall policy and IPS policy Although Cisco has made enormous strides in its management with the release of Cisco Security Manager, the firewall and IPS are not as integrated as they should be.