Auto-Update can cause problems. I take the stance that updates should be verified in a CERT or ISO first, before being operationalized. --p
-----Original Message----- From: Colin Johnston [mailto:col...@gt86car.org.uk] Sent: Friday, February 06, 2015 10:46 AM To: Darden, Patrick Cc: Colin Johnston; Roland Dobbins; nanog@nanog.org Subject: [EXTERNAL]Re: Checkpoint IPS Yes, update can cause problems, same as router code updates as well. but update is price of progress. Col > On 6 Feb 2015, at 16:44, Darden, Patrick <patrick.dar...@p66.com> wrote: > > > Sorry, didn't mean to imply otherwise. Had an incident back in ~2004 where > an IPS signature update closed ALL network traffic. Including fix-it > updates. Definitely a case where the IPS caused major difficulties for a > network. > > --p > > -----Original Message----- > From: Colin Johnston [mailto:col...@gt86car.org.uk] > Sent: Friday, February 06, 2015 10:32 AM > To: Darden, Patrick > Cc: Colin Johnston; Roland Dobbins; nanog@nanog.org > Subject: [EXTERNAL]Re: Checkpoint IPS > > Thought I would add > > Astaro IPS works great, great functionality and does prevent ddos and > exploits. > > Colin >
