This software-only product can be deployed as an inline IDS, inlineIPS, or deployed off of a tap. Additionally, it can provide detailedthreat and asset correlation using its comprehensive surrounding assetknowledge module (SAK). This feature locates potential trouble areasbefore they become a problem. Finally, it has a learning mode that canbe deployed in the network before implementing policy, which helps takethe guesswork out of policy configuration.
To say this product is challenging to deploy would be anunderstatement. Once the software is purchased, it needs a computer togo on. CounterSnipe has designed this software to be compatible onlywith the exact specifications that are described in the documentation.We found that if the platform has different hardware, the applicationwill not work. We wish that CounterSnipe had stuck with their popularappliance rather than go to a software-only implementation.
The rest of the set-up was fairly straightforward, but managingpolicy on the device is a tangled maze of configuration levels. Itbecomes confusing very quickly. Additionally, the Java-based managementinterface is slow and awkward to navigate.
We found this device to have good performance. It was able to stopmost of the bad traffic from our scanners and we found ourselves unableto penetrate the protected network. The event log also provided nearreal-time event descriptions that were clear and understandable.
The documentation for this product is light. The software came witha small two-sheet quick start guide that gives the hardwarerequirements and steps to install the software.
CounterSnipe offers 24/7/365 support, but we had to search for anydescription of support programs. We found a brief discussion in a PDFfile entitled "professional services" buried on the website.Substantive support appears to be an extra cost item and is availablein standard and platinum packages.
With a price just under $5,000, this product looks on the surface tobe a bargain for almost any company, but after a deeper look this dealmay not be so sweet. An appliance has to be purchased separately andthat plus the added difficulty of managing this product adds to cost ofownership. All in all, this product is a somewhat less than averagevalue for money.
