
Guys, Looking for the subject but should be a h/w device with UTM and no renewable licence (not cyberoam) - one time! contact me and state the make or give url to read more...thanks. Wilson

On Tue, Oct 19, 2010 at 10:03 AM, Thuo Wilson <lixton@gmail.com> wrote:
Guys,
Looking for the subject but should be a h/w device with UTM and no renewable licence (not cyberoam) - one time!
contact me and state the make or give url to read more...thanks.
Talk to any Cisco vendors. If you have ASA 5500 series, you can buy the AIP-SSM (Advanced Inspection and Prevention – Security Services Module), which is a full-blown IDS/IPS sensor with the same software and functionality like the external standalone IPS-4200 series appliance. So decide whether ASA5500+AIP-SSM or the IPS-4200 (not sure what is the latest!) is suitable for you. I am **NOT** a Cisco Vendor, neither am I an expert in Cisco Security. Just some clues you can work with. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!

UTM is quite wide from wikipedia "firewall, VPN, gateway anti-virus, gateway anti-spam, intrusion prevention, content filtering, bandwidth management and centralized reporting as basic features" Hence, when looking at a UTM solution we should start by identifying what you require from it and also the BUDGET. The subscription is almost inevitable since some of these services require the signatures to be updates similar to anti-virus updates. OpenSource Projects 1. http://m0n0.ch/wall/quickstart.php 2. http://www.untangle.com/Product-Overview etc Commercial Products locally available 1. Cisco ASA5500; CSC, Firewall or IDS editions 2. Cyberroam 3. Sonicwall (Personal Favorite) 4. Checkpoint (Could be Market Leaders) Regards Denis On Tue, Oct 19, 2010 at 10:11 AM, Odhiambo Washington <odhiambo@gmail.com> wrote:
On Tue, Oct 19, 2010 at 10:03 AM, Thuo Wilson <lixton@gmail.com> wrote:
Guys,
Looking for the subject but should be a h/w device with UTM and no renewable licence (not cyberoam) - one time!
contact me and state the make or give url to read more...thanks.
Talk to any Cisco vendors. If you have ASA 5500 series, you can buy the AIP-SSM (Advanced Inspection and Prevention – Security Services Module), which is a full-blown IDS/IPS sensor with the same software and functionality like the external standalone IPS-4200 series appliance.
So decide whether ASA5500+AIP-SSM or the IPS-4200 (not sure what is the latest!) is suitable for you.
I am **NOT** a Cisco Vendor, neither am I an expert in Cisco Security. Just some clues you can work with.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Hey Guys, Anyone knows where i can get sonicwall OR Checkpoint? Wilson. On 21 October 2010 11:34, Denis G. Wahome <dwahome@gmail.com> wrote:
UTM is quite wide from wikipedia
"firewall, VPN, gateway anti-virus, gateway anti-spam, intrusion prevention, content filtering, bandwidth management and centralized reporting as basic features"
Hence, when looking at a UTM solution we should start by identifying what you require from it and also the BUDGET. The subscription is almost inevitable since some of these services require the signatures to be updates similar to anti-virus updates.
OpenSource Projects
1. http://m0n0.ch/wall/quickstart.php
2. http://www.untangle.com/Product-Overview
etc
Commercial Products locally available
1. Cisco ASA5500; CSC, Firewall or IDS editions
2. Cyberroam
3. Sonicwall (Personal Favorite)
4. Checkpoint (Could be Market Leaders)
Regards
Denis
On Tue, Oct 19, 2010 at 10:11 AM, Odhiambo Washington <odhiambo@gmail.com> wrote:
On Tue, Oct 19, 2010 at 10:03 AM, Thuo Wilson <lixton@gmail.com> wrote:
Guys,
Looking for the subject but should be a h/w device with UTM and no renewable licence (not cyberoam) - one time!
contact me and state the make or give url to read more...thanks.
Talk to any Cisco vendors. If you have ASA 5500 series, you can buy the AIP-SSM (Advanced Inspection and Prevention – Security Services Module), which is a full-blown IDS/IPS sensor with the same software and functionality like the external standalone IPS-4200 series appliance.
So decide whether ASA5500+AIP-SSM or the IPS-4200 (not sure what is the latest!) is suitable for you.
I am **NOT** a Cisco Vendor, neither am I an expert in Cisco Security.
Just
some clues you can work with.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

also try radware http://www.radware.com distributed by amiran http://www.amirancomm.com/index.php?option=com_content&view=article&id=66&It... On Mon, Feb 14, 2011 at 4:15 PM, Thuo Wilson <lixton@gmail.com> wrote:
Hey Guys,
Anyone knows where i can get sonicwall OR Checkpoint?
Wilson.
On 21 October 2010 11:34, Denis G. Wahome <dwahome@gmail.com> wrote:
UTM is quite wide from wikipedia
"firewall, VPN, gateway anti-virus, gateway anti-spam, intrusion prevention, content filtering, bandwidth management and centralized reporting as basic features"
Hence, when looking at a UTM solution we should start by identifying what you require from it and also the BUDGET. The subscription is almost inevitable since some of these services require the signatures to be updates similar to anti-virus updates.
OpenSource Projects
1. http://m0n0.ch/wall/quickstart.php
2. http://www.untangle.com/Product-Overview
etc
Commercial Products locally available
1. Cisco ASA5500; CSC, Firewall or IDS editions
2. Cyberroam
3. Sonicwall (Personal Favorite)
4. Checkpoint (Could be Market Leaders)
Regards
Denis
On Tue, Oct 19, 2010 at 10:11 AM, Odhiambo Washington <odhiambo@gmail.com> wrote:
On Tue, Oct 19, 2010 at 10:03 AM, Thuo Wilson <lixton@gmail.com> wrote:
Guys,
Looking for the subject but should be a h/w device with UTM and no renewable licence (not cyberoam) - one time!
contact me and state the make or give url to read more...thanks.
Talk to any Cisco vendors. If you have ASA 5500 series, you can buy the AIP-SSM (Advanced Inspection and Prevention – Security Services Module), which is a full-blown IDS/IPS sensor with the same software and functionality like the external standalone IPS-4200 series appliance.
So decide whether ASA5500+AIP-SSM or the IPS-4200 (not sure what is the latest!) is suitable for you.
I am **NOT** a Cisco Vendor, neither am I an expert in Cisco Security.
Just
some clues you can work with.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Hi If your looking for a one off appliance (am thinking with same functionalities as cyberoam) you wont get. It makes no sense to the manufacturer to give you all those features without you having to pay for the services they give you. On 14 February 2011 17:24, benson maina <bensonmaina@gmail.com> wrote:
also try radware http://www.radware.com
distributed by amiran
http://www.amirancomm.com/index.php?option=com_content&view=article&id=66&It...
On Mon, Feb 14, 2011 at 4:15 PM, Thuo Wilson <lixton@gmail.com> wrote:
Hey Guys,
Anyone knows where i can get sonicwall OR Checkpoint?
Wilson.
On 21 October 2010 11:34, Denis G. Wahome <dwahome@gmail.com> wrote:
UTM is quite wide from wikipedia
"firewall, VPN, gateway anti-virus, gateway anti-spam, intrusion prevention, content filtering, bandwidth management and centralized reporting as basic features"
Hence, when looking at a UTM solution we should start by identifying what you require from it and also the BUDGET. The subscription is almost inevitable since some of these services require the signatures to be updates similar to anti-virus updates.
OpenSource Projects
1. http://m0n0.ch/wall/quickstart.php
2. http://www.untangle.com/Product-Overview
etc
Commercial Products locally available
1. Cisco ASA5500; CSC, Firewall or IDS editions
2. Cyberroam
3. Sonicwall (Personal Favorite)
4. Checkpoint (Could be Market Leaders)
Regards
Denis
On Tue, Oct 19, 2010 at 10:11 AM, Odhiambo Washington <odhiambo@gmail.com> wrote:
On Tue, Oct 19, 2010 at 10:03 AM, Thuo Wilson <lixton@gmail.com>
wrote:
Guys,
Looking for the subject but should be a h/w device with UTM and no renewable licence (not cyberoam) - one time!
contact me and state the make or give url to read more...thanks.
Talk to any Cisco vendors. If you have ASA 5500 series, you can buy the AIP-SSM (Advanced Inspection and Prevention – Security Services Module), which is a full-blown IDS/IPS sensor with the same software and functionality like the external standalone IPS-4200 series appliance.
So decide whether ASA5500+AIP-SSM or the IPS-4200 (not sure what is the latest!) is suitable for you.
I am **NOT** a Cisco Vendor, neither am I an expert in Cisco Security. Just some clues you can work with.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Just for an advice on security point of view, please go Juniper Firewalls, McAfee IDS sensors. I was doing a Pentest last year in UK, and a network that was used for some special product was behind Juniper, i tried to evade them but i couldn't fully do it, since i had to figure out which payload to evade with. For Cisco, that is used by several people here in the country, i don't need to do alot of recon to run an Evasion. hope they improve. So its your choice. regards, ./Chucks On 2/14/11, Joe Maina <maina307@gmail.com> wrote:
Hi
If your looking for a one off appliance (am thinking with same functionalities as cyberoam) you wont get. It makes no sense to the manufacturer to give you all those features without you having to pay for the services they give you.
On 14 February 2011 17:24, benson maina <bensonmaina@gmail.com> wrote:
also try radware http://www.radware.com
distributed by amiran
http://www.amirancomm.com/index.php?option=com_content&view=article&id=66&It...
On Mon, Feb 14, 2011 at 4:15 PM, Thuo Wilson <lixton@gmail.com> wrote:
Hey Guys,
Anyone knows where i can get sonicwall OR Checkpoint?
Wilson.
On 21 October 2010 11:34, Denis G. Wahome <dwahome@gmail.com> wrote:
UTM is quite wide from wikipedia
"firewall, VPN, gateway anti-virus, gateway anti-spam, intrusion prevention, content filtering, bandwidth management and centralized reporting as basic features"
Hence, when looking at a UTM solution we should start by identifying what you require from it and also the BUDGET. The subscription is almost inevitable since some of these services require the signatures to be updates similar to anti-virus updates.
OpenSource Projects
1. http://m0n0.ch/wall/quickstart.php
2. http://www.untangle.com/Product-Overview
etc
Commercial Products locally available
1. Cisco ASA5500; CSC, Firewall or IDS editions
2. Cyberroam
3. Sonicwall (Personal Favorite)
4. Checkpoint (Could be Market Leaders)
Regards
Denis
On Tue, Oct 19, 2010 at 10:11 AM, Odhiambo Washington <odhiambo@gmail.com> wrote:
On Tue, Oct 19, 2010 at 10:03 AM, Thuo Wilson <lixton@gmail.com>
wrote:
Guys,
Looking for the subject but should be a h/w device with UTM and no renewable licence (not cyberoam) - one time!
contact me and state the make or give url to read more...thanks.
Talk to any Cisco vendors. If you have ASA 5500 series, you can buy the AIP-SSM (Advanced Inspection and Prevention – Security Services Module), which is a full-blown IDS/IPS sensor with the same software and functionality like the external standalone IPS-4200 series appliance.
So decide whether ASA5500+AIP-SSM or the IPS-4200 (not sure what is the latest!) is suitable for you.
I am **NOT** a Cisco Vendor, neither am I an expert in Cisco Security. Just some clues you can work with.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- -- Gichuki John Ndirangu, C.E.H , C.P.T.P, O.S.C.P I.T Security Analyst and Penetration Tester infosigmer@inbox.com {FORUM}http://lists.my.co.ke/pipermail/security/ http://nspkenya.blogspot.com/ http://chuksjonia.blogspot.com/

You can get both Sonicwall and Checkpoint from WestconAfrica - 020 4201000 On Mon, Feb 14, 2011 at 7:04 PM, Gichuki John Chuksjonia < chuksjonia@gmail.com> wrote:
Just for an advice on security point of view, please go Juniper Firewalls, McAfee IDS sensors. I was doing a Pentest last year in UK, and a network that was used for some special product was behind Juniper, i tried to evade them but i couldn't fully do it, since i had to figure out which payload to evade with.
For Cisco, that is used by several people here in the country, i don't need to do alot of recon to run an Evasion. hope they improve. So its your choice.
regards,
./Chucks
On 2/14/11, Joe Maina <maina307@gmail.com> wrote:
Hi
If your looking for a one off appliance (am thinking with same functionalities as cyberoam) you wont get. It makes no sense to the manufacturer to give you all those features without you having to pay for the services they give you.
On 14 February 2011 17:24, benson maina <bensonmaina@gmail.com> wrote:
also try radware http://www.radware.com
distributed by amiran
http://www.amirancomm.com/index.php?option=com_content&view=article&id=66&It...
On Mon, Feb 14, 2011 at 4:15 PM, Thuo Wilson <lixton@gmail.com> wrote:
Hey Guys,
Anyone knows where i can get sonicwall OR Checkpoint?
Wilson.
On 21 October 2010 11:34, Denis G. Wahome <dwahome@gmail.com> wrote:
UTM is quite wide from wikipedia
"firewall, VPN, gateway anti-virus, gateway anti-spam, intrusion prevention, content filtering, bandwidth management and centralized reporting as basic features"
Hence, when looking at a UTM solution we should start by identifying what you require from it and also the BUDGET. The subscription is almost inevitable since some of these services require the signatures to be updates similar to anti-virus updates.
OpenSource Projects
1. http://m0n0.ch/wall/quickstart.php
2. http://www.untangle.com/Product-Overview
etc
Commercial Products locally available
1. Cisco ASA5500; CSC, Firewall or IDS editions
2. Cyberroam
3. Sonicwall (Personal Favorite)
4. Checkpoint (Could be Market Leaders)
Regards
Denis
On Tue, Oct 19, 2010 at 10:11 AM, Odhiambo Washington <odhiambo@gmail.com> wrote:
On Tue, Oct 19, 2010 at 10:03 AM, Thuo Wilson <lixton@gmail.com>
wrote:
> > Guys, > > Looking for the subject but should be a h/w device with UTM and no > renewable licence (not cyberoam) - one time! > > contact me and state the make or give url to read more...thanks. >
Talk to any Cisco vendors. If you have ASA 5500 series, you can buy the AIP-SSM (Advanced Inspection and Prevention – Security Services Module), which is a full-blown IDS/IPS sensor with the same software and functionality like the external standalone IPS-4200 series
appliance.
So decide whether ASA5500+AIP-SSM or the IPS-4200 (not sure what is the latest!) is suitable for you.
I am **NOT** a Cisco Vendor, neither am I an expert in Cisco
Security. Just
some clues you can work with.
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- -- Gichuki John Ndirangu, C.E.H , C.P.T.P, O.S.C.P I.T Security Analyst and Penetration Tester infosigmer@inbox.com
{FORUM}http://lists.my.co.ke/pipermail/security/ http://nspkenya.blogspot.com/ http://chuksjonia.blogspot.com/ _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards, NB...
participants (7)
-
benson maina
-
Denis G. Wahome
-
Gichuki John Chuksjonia
-
Joe Maina
-
Nawaz Bagha
-
Odhiambo Washington
-
Thuo Wilson