We have an old Cisco ASA 5510 (EOL) and I am interested in getting easy-to-manage IPS functionality. I am looking at the newer version of ASA and there is an IPS Edition which appears to include more capable IPS functionality.
It looks like Cisco got rid of their sensors except for higher end $70k list. Not sure if there are other easy-to-use and tune IPS solutions (we are single site, 150 emp, PCI compliance).
If you use the IPS Edition from Cisco..
1) How do you manage/tune?
2) Is it pretty easy to make changes?
3) Is there any additional software we would want to include for alerting/monitoring?
If you have an alternate easy to use IPS, what is it?
Thanks in advance,