[c-nsp] Opinions of DDoS appliances, other techniques, most notably Cisco Guard

[Justin Shore]

Roland Dobbins wrote:
> 
> On Mar 16, 2009, at 12:39 AM, Roland Dobbins wrote:
> 
>> Arbor Peakflow SP, Narus Insight Manager, and Lancope StealthWatch Xe 
>> are three commercial NetFlow-based anomaly-detection systems.
> 
> I forgot to add Q1 Labs Q1Radar, and I believe NetQoS now have an 
> anomaly-detection module, as well, though I've not seen it.

How about MARS?  I'm trying to get a pair of IDSM2s returned (they don't 
work right on 7600s) in exchange for a MARS 110R appliance.  That's 
roughly the same price.  I'm planning on using it for log analysis. 
Would its Netflow abilities be useful here?

Justin