Network IDS: Endace EP Core-100 2010

During Q3 2010, NSS Labs performed an independent group test of network intrusion detection and prevention systems (IDS / IPS) currently on the market. Vendors included in the test voluntarily submitted their products to NSS Labs free of charge and we did not receive any compensation in return for their participation. Each product was subjected to thorough testing at the NSS Labs facility based on methodology v6.1 available on www.nsslabs.com.

While the Network IDS / IPS Group Test Report provides comparative information about those products, this Individual Test Report provides detailed information on a specific product not available elsewhere.

As part of this test, Endace submitted the EP Core-100 Network IDS, which was deployed out-of-band to a 10Gbps monitoring port. As an IDS, our product ratings refer to detection of attacks, rather than prevention.

Rather than a complete solution with rule writers behind it, the EP Core-100, the Endace EP Core-100 is a high-speed platform for Snort installations. It is one of the few products on the market capable of servicing the high throughput of a true 10-Gigabit environment. In addition, it supports a range of complementary functions, such as continuous packet capture (write-to-disk) and integrated network analytics.

All IDS solutions can miss attacks, either due to lack of detection capabilities (i.e. signatures) or when the traffic load exceeds the devices capacity (e.g. such as state table memory, processing power, network interface limitations, etc.). Even under the harshest conditions, at full 10-Gigabit capacity with small 1.7KB HTTP Response traffic, we could not force the EP Core-100 to leak attacks.

• How the product performed using the default configuration and after it had been tuned
• How the product fared against known evasion techniques
• What level of throughput the product was able to sustain
• What the product's total cost of ownership (TCO) was for one, two, and three years

Purchase report to get the product rating and full testing results.

Pricing is for a single-user license. Please contact us for multi-user, corporate and other pricing options.

Purchase
Price: $600