Go Greased Lightening

Dominic I promise this is my last post on this one as you have ridden my coat tails long enough.  My wild assertions on your use of Snort and IP Tables are based upon what I have been told by others who have looked at your product.  If you really don't use Snort, how about some specifics on the rule set you use?  How many rules?  What can you really catch?  Has it ever been in an independent bake off or test? 

I see you are quite the book worm in reading up on the recent Network World review of most of the NAC products out there.  Funny I didn't see your product listed in that bake off.  Are you afraid to show your stuff?  Or maybe it is because the last time Network World reviewed your product they had this to say:

Being deep in the network presents challenges for both authentication and enforcement, and Nevis has made some design choices that may not be acceptable to enterprise users or network managers. Authentication is done through a captive web portal. This facilitates endpoint-security posture assessment with Nevis' own ActiveX client, but may be too intrusive for many environments. Network managers may also find that the LANsight Security Manager, Nevis' GUI-based management system, is clumsy when it comes to defining complex security policies.

Our greatest concern with LANenforcer is the large number of bugs we found in almost every component, including endpoint security, malware detection, management and in the hardware itself. As with any new product, Nevis may need more time to shake out some of the problems with this release.

Dominic, to answer your questions: our inline mode is more for remote access, not for inline the way your talk about it.  We don't claim to be a switch and we don't want to put a box in front of every switch out there. Your right, authorization on user roles is something we have not put in yet, but it will be there.  On advanced endpoint checks, nothing could be easier, I bet even a marketing guy could figure them out.  It is point and click baby.  You can write your own rules in Python, for the record.  Checking for a few token things like Blaster?  Dominic, I am not you.  Ask me what we can check for, I would be happy to show you.  It is more like over a 150 checks out of the box. And yes you can use our IPS, even our free version of it if you like.

Dominic, I am the sheriff in this town, my name is Alan Shimel and this is my blog.  I will finish with this.  Very impressive description of your big, bad ASIC at the bottom of your blog.  Reading it I had visions of you and the Nevis bunch dancing around a Nevis box singing Go Greased Lightening, like in the movie Grease.  So were you John Travolta?  Who plays Olivia Newton-John?