August 01, 2007
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: A solid product with lots of features, including near real-time dashboard refresh
- Weaknesses: None that we could find in this test
- Verdict: A solid product with good integration to other NitroView products, if a bit costly in its full configuration with the ESM. Recommended for its excellent performance, ease of use and flexibility
Part of the NitroView suite, NitroGuard is one of a handful of IPS products that allows detailed analysis of captured events. When used with the rest of the suite its analysis capability go beyond that normally found in an IPS. The device's near real-time dashboard updates as new alerts arrive rather than using a refresh cycle that does batch updating. We saw this in only one other product.
The appliance is easy to install, helped by a small guide that provides a good level of detail when it comes to things such as physical installation, cabling and selection of an appropriate IPS architecture.
The device is managed remotely from a software console that comes with it, and there is a separate installation guide for the console. If your organisation has the rest of the NitroView suite, the same console can be used for all elements, obviating the need for separate console installations.
We installed the NitroGuard IPS with the rest of the suite (NitroView Receiver and NitroView Enterprise Security Manager (ESM) - optional, extra- cost appliances) without problems and tested with our Attack Pod.
The results were excellent, with the product identifying our attacks at all levels and delivering its results to the ESM for analysis in near real time. Setup and rule generation is straightforward and the use of wizards and comprehensive menus eases the process.
The documentation is complete and comes on a separate CD. The main documentation includes all of the pieces of the NitroView suite, so interconnection and interoperation is clearly presented in a single document. The PDF file is well indexed and the information we needed was very easy to find.
Support offerings are rich with a variety of options. There are two sections of the website available to all users with things such as manuals and white papers. All you need to do is sign up. In addition, silver and gold support packages can be purchased, offering a huge assortment of services including advance hardware replacement and a two-hour response time (gold).
Priced at £6,775, the NitroGuard is at the low end of the range. The ESM offers an enhanced level of analysis, for an additional cost.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Information Security Risk Manager, £45-55k + bens
Infosec People - West Midlands, England, Coventry
SOC Analyst, Aldershot, £55-63k + benefits
Infosec People - England, Aldershot, Hampshire
Security Architect, Cardiff - to £70k Basic
Infosec People - Cardiff, Wales
Interim CISO (Chief Information Security Officer) - Cyber Security Director
CYBER EXECS - London (Central), London (Greater)
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Cyber-security must reflect risk not just regulation
- Met Police grab suspect with phone unlocked to get hold of data
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report