Tolly Report Overview

Sponsor:   Top Layer Networks     View all reports from this sponsor

Title: Top Layer Networks Attack Mitigator IPS 5500 IPS Evaluation versus TippingPoint UnityOne-2400

Publication date:   02 December 2004
Document number:    204146

Abstract:

Top Layer Networks, Inc. commissioned The Tolly Group to evaluate its Attack Mitigator IPS 5500, an intrusion prevention system designed to stop network-based threats while allowing legitimate transactions to complete.

The Tolly Group evaluated the effectiveness of the Attack Mitigator IPS 5500 at dealing with single-protocol and mixed-protocol Distributed Denial-of-Service (DDoS) SYN flood attacks. Moreover, engineers examined the capability of the Attack Mitigator IPS 5500 to handle real-time identification and blocking of embedded worms when mixed in otherwise normal traffic. Tests focused on the capability to filter such traffic while monitoring what, if any, degradation that screening caused to the IPS’ connection rate.

Engineers conducted these tests on the Attack Mitigator IPS 5500 and compared the results to a TippingPoint Technologies Inc. UnityOne-2400 IPS. In every test case the Top Layer IPS5500 outperformed the UnityOne-2400. Tests show the IPS5500 is up to 82.5% more effective at blocking embedded worm attacks than the UnityOne-2400 during tests with worms infecting from 10% to 50% of traffic. Tests also demonstrate that the IPS5500 completes 100% of HTTP and mixed protocol connections attempted while under SYN flood attack. Tests were conducted in October 2004.


Number of pages: 8      Publication price: $0.00

Register to download   or login

Click on image to download this report



Click Here to search the Tolly archives