From: Brad Ellis (brad@ccbootcamp.com)
Date: Mon Mar 27 2006 - 21:03:01 GMT-3
Tim,
I actually hadn't heard of it either until one of my clients was asking me
about it (and I thought he was referring to the IPS flavored model). After
some research, this thing looks slick...it's a VERY new product. I didn't
see the part # on the DPRG list a month or so ago...(DPRG - disti product
reseller guide or something like that)
The IPS and Control Security Services modules are separate modules and I
believe they CAN NOT be installed together. (not 100% sure, but I believe
there's only one slot on the ASA5500s for a mod). I haven't actually played
with an ASA5500, but I have two of them enroute - one of them is the nice
ASA5510 w/ Control Security Services Module. I'll be setting it up this
week for my production network, so we'll see how well it works when I filter
my employees out of their favorite nasty sites! Since Ive gotten a lot of
response on this box from folks on groupstudy, I'll do a little mini-review
and post it when I've played withit for a few days (and see how it
performs).
This box does a lot more than just URL filtering, so keep that in mind when
you're comparing it to websense. The anti-virus and spam features should be
nifty. However, there is a yearly subscription fee through Trend-Micro that
you also need to consider (not sure of the price on that).
If you want to check it out, shoot me an email offlist w/ your phone # and
I'll give you a call when it comes in and you can console into it or VNC
into my console session.
thanks,
Brad Ellis
CCIE#5796 (R&S / Security)
CCSI#30482
Network Learning Inc - A Cisco Learning Partner (CLP)
YES! We take Cisco Learning credits!
brad@ccbootcamp.com
www.ccbootcamp.com (Cisco Training)
Voice: 702-968-5100
FAX: 702-446-8012
----- Original Message -----
From: "Tim" <ccie2be@nyc.rr.com>
To: "Brad Ellis" <brad@ccbootcamp.com>; <ccielab@groupstudy.com>; "Cisco
certification" <security@groupstudy.com>
Sent: Monday, March 27, 2006 1:36 PM
Subject: RE: Websense vs N2H2 [bcc][faked-from]
Hey Brad,
I want to thank you and everyone else who responded to my query for all the
valuable info that's been provided. I appreciate it.
Also, until you mentioned it, I had never heard of this new Cisco Content
filtering product. It looks good on paper.
Do you have any experience with it?
How does it compare with Websense from a cost and performance point of view?
Do you know if both the IDS module and the Content Filtering can both be
installed in the ASA at the time or are they mutually exclusive?
Also, do you know how new this product is? It's usually not a good idea
going with a product like this if there hasn't been time for all the kinks
to be worked out.
Thanks again for valuable info.
Tim
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Brad
Ellis
Sent: Monday, March 27, 2006 2:28 PM
To: Tim; ccielab@groupstudy.com; Cisco certification
Subject: Re: Websense vs N2H2 [bcc][faked-from]
Tim,
Have you checked out the new ASA box (Cisco ASA 5500 Series Content Security
and Control Security Services Module )?
http://www.cisco.com/en/US/products/ps6120/products_data_sheet0900aecd80402e
4f.html
It does URL filtering and a lot more.
To answer your question, yes, I've seen a lot more installs with Websense
then I have with N2H2. I've personally installed Websense three times from
scratch and it was a piece of cake. If you're looking at selling a content
filter, however, sell the ASA5500...Im sure you're local CAM will love ya.
:)
thanks,
Brad Ellis
CCIE#5796 (R&S / Security)
CCSI#30482
Network Learning Inc - A Cisco Learning Partner (CLP)
YES! We take Cisco Learning credits!
brad@ccbootcamp.com
www.ccbootcamp.com (Cisco Training and Advanced Technology Rental Racks)
----- Original Message -----
From: "Tim" <ccie2be@nyc.rr.com>
To: <ccielab@groupstudy.com>; "Cisco certification"
<security@groupstudy.com>
Sent: Monday, March 27, 2006 8:39 AM
Subject: Websense vs N2H2 [bcc][faked-from]
Hi guys,
I'm looking for opinions on which of the above content filters is better.
I know that both are supported by Cisco PIX firewalls but I don't have first
hand experience with either of them.
If the answers is, "It depends.", can you provide some high level criteria
to based a decision on?
Over the years, I've gotten the gut impression that Websense is the more
popular of the two but that might have more to do with my limited exposure.
TIA, Tim
This archive was generated by hypermail 2.1.4 : Sat Apr 01 2006 - 10:07:40 GMT-3