Slashdot Mirror


Cisco to Acquire Perfigo

MisterFuRR writes "Looks like Cisco is going to acquire Perfigo. Perfigo is a developer of packaged network access control solutions that provide endpoint policy analysis, compliance, and access enforcement capabilities. I can just see it now: Linksys routers with stickers that say 'Perfigo Ready.'"

110 comments

  1. LInksys makes crappy routers by Anonymous Coward · · Score: 0

    Why is Cisco doing this? Surely they can do better.

    1. Re:LInksys makes crappy routers by jesuscash · · Score: 3, Interesting

      It seems to be Cisco's business strategy lately to acquire other (smaller) companys so they don't have to plunk down the cash for R&D and so that they can make knee-jerk reactions to market demands. What results is a product not ready for prime time that they have little understanding of and the TAC's are as confused as the sys-admins. Their infrastructure devices seem to do a fairly decent job, but try to find any information on their IDS (formerly NetRanger). End of life for these things is less than a year away and documentation is sparse at best. At least their message boards confirm that others are seeing the same problems and we're not just crazy.

  2. Re:More monopolization by ScrewMaster · · Score: 4, Informative

    There are. The Sherman Antitrust Act, for one. The problem is enforcement.

    --
    The higher the technology, the sharper that two-edged sword.
  3. Well... by Anonymous Coward · · Score: 3, Funny

    ...if you can't innovate, just acquire and extort. It worked for Microsoft.

    1. Re:Well... by Anonymous Coward · · Score: 2, Insightful

      Cisco has always made a practice of purchasing companies that have technology they want. Why innovate when it's easier to acquire a company? Cisco is full of small dev teams that come from acquired companies. Linksys just happened to be a large purchase for them.

    2. Re:Well... by _Hellfire_ · · Score: 5, Informative

      Yeah absolutely!

      Cisco hasn't really done anything for networking in their entire history. Oh except for Standby Router Protocol, and IGRP (Interior Gateway Routing Protocol). They also innovated on their own design with EIGRP (Enhanced Interior Gateway Routing Protocol) Oh they also did Spanning Tree Protocol, VLAN Trunking Protocol, Skinny (a VoIP standard) and Hot Standby Routing Protocol.

      Not to mention Multiple Spanning Tree (MST), a new IEEE standard that grew from Cisco's proprietary
      Multiple Instances Spanning Tree Protocol (MISTP) implementation.

      They also invented NetFlow and WCCP (Web Cache Control Protocol).

      So yeah! No innovation at all from this company that has become the baseline in security and reliability for networking.

      Show some respect, because that Internet connection you're on at the moment is probably brought to you courtesy of Cisco innovation.

      --
      "And then I visited Wikipedia ...and the next 8 hours are a blur..."
    3. Re:Well... by pyite · · Score: 2, Informative

      You seem to have left out a couple. Let me enlighten you!

      SRP (Spatial Reuse Protocol)
      DPT (Dynamic Packet Transport)

      which of course have gone on to inspire the IEEE 802.17 standard RPR (Resilient Packet Ring).

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    4. Re:Well... by jd · · Score: 2, Insightful
      Agreed with the above points, but CISCO's strength has tended to lie more in implementing other people's standard well, than in revolutionising the network protocol world.


      The Cisco Discovery Protocol is cool, but closed so other people had to invent their own, and most of them don't talk to each other. (GateD's discovery protocol, for example, is wonderful. Assuming the only router you ever want to use is GateD.)


      Cisco's deployment of IPv6 was surprisingly slower than that of, say, Bay or Telebit. (For a long time, the only IPv6 hardware router that earned much respect was the one by Telebit. Not bad going, when you consider that they're hardly one of the giants in the router world.)


      Other things are more curious. I'm fairly sure Cisco's IOS supports the ISIS protocol, but I don't think they do ESES or ESIS. Their QoS is extremely limited, being only three levels of priority per packet classification plus weighted fair queueing. I'm fairly sure they don't do RED, CBQ, HFQ, SFQ, ECN, IMQ or any of the fancier packet manipulations Netfilter nerds take for granted. Nor have they invented anything distinct but comparable in flexibility.


      While I agree, then, that Cisco has had a huge impact on the networking world and that the innovation they have done has generally influenced a lot of the way things are done, they are still far short of where they could be. Now, I could be wrong, but I believe the poster's intent was that Cisco isn't going to get any closer to their potential by just taking other firms over. It may improve your product range, but it doesn't alter your mind's range. You can generally do a lot more by stretching the mind than stretching the wallet, although there are plenty of cases where doing the latter makes doing the former much easier.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    5. Re:Well... by rapcomp · · Score: 1

      If you can't beat'm, buy'm

      --
      Does this look like the face of concern?
    6. Re:Well... by PatJensen · · Score: 1

      Skinny is not a standard. It is proprietary for Cisco products only.. unlike MGCP and SIP which are wide open.

  4. A rich ecosystem? by e9th · · Score: 5, Funny
    [Cisco] NAC provides a rich ecosystem...

    You know, that's the worst abuse of the word ecosystem I've ever heard.

    I guess *BSD is the spotted owl here.

    1. Re:A rich ecosystem? by DAldredge · · Score: 1

      I had a nice reply written, but I had to kill it.

      I just can not bring myself to type the p word.

      I guess i can't think out of the box...

    2. Re:A rich ecosystem? by Anonymous Coward · · Score: 0
      ...the p word.

      pneumonoultramicroscopicsilicovolcanoconiosis? Yeah, I hate typing it, too. But it's in Webster's 7th Collegiate, so sometimes I have to.

    3. Re:A rich ecosystem? by jd · · Score: 1

      Nonono. *BSD is definitely the duck-billed platypus.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    4. Re:A rich ecosystem? by e9th · · Score: 1

      You are correct. In fact, I will name my next platypus "Theo."

    5. Re:A rich ecosystem? by fm6 · · Score: 1

      "Environment" would have been more appropriate. But either way it's just a metaphor.

    6. Re:A rich ecosystem? by metlin · · Score: 1

      No.

      The ego would be too big to fit into an animal that small ;-)

  5. Re:More monopolization by Anonymous Coward · · Score: 4, Insightful

    Perfigo was funded by a venture capital firm. Their whole purpose was to either a) make a bunch of money selling their stuff to individual customers b) make a bunch of money selling the stuff to a larger company

    Cisco, for years, has aquired many smaller companies for the technology and/or ideas the smaller companies have.

    http://www.google.com/search?hl=en&lr=&client=fi re fox-a&q=100+best+companies+to+work+for+cisco&btnG= Search

    I recall reading that cisco was among the top 100 companies to work for in the US. Rated by their employees...

  6. Netcraft confirms it.... by Anonymous Coward · · Score: 0

    Cisco is dying

    1. Re:Netcraft confirms it.... by jd · · Score: 1

      It can't be. The colors would all run in the wash.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  7. I see... by Anonymous Coward · · Score: 5, Funny

    'Perfigo is a developer of packaged network access control solutions that provide endpoint policy analysis, compliance, and access enforcement capabilities.'

    It's all so clear to me now.

    1. Re: I see... by Black+Parrot · · Score: 3, Funny


      > > 'Perfigo is a developer of packaged network access control solutions that provide endpoint policy analysis, compliance, and access enforcement capabilities.'

      > It's all so clear to me now.

      Unfortunately your PHB will feel like he has to pretend to understand it, because all the other PHBs are pretending they understand it and yours doesn't want to look like the only person in the room who doesn't get it. So he'll bring home a million dollars worth and tell you to install it.

      --
      Sheesh, evil *and* a jerk. -- Jade
    2. Re: I see... by 44BSD · · Score: 1

      I am not familiar with Perfigo, but it seems as though they make equipment which will not allow a device to obtain non-trivial network access unless/until it has been shown to be up to snuff according to various configurable criteria. Something like "Now that Nessus says you're cool, you get routed out of this prison".

    3. Re: I see... by ShinmaWa · · Score: 4, Informative

      I am not familiar with Perfigo, but it seems as though they make equipment which will not allow a device to obtain non-trivial network access unless/until it has been shown to be up to snuff according to various configurable criteria

      Got it in one! Right on.

      That's exactly what Perfigo does. Its becoming rather popular on college campuses to protect their networks from morons coming back from summer vacation with their laptops and desktops loaded with worms, virii, trojans, major security holes, etc.

      --
      The /. Effect: Thousands of users simultaneously accessing a site to not read its content.
    4. Re:I see... by bcreane · · Score: 1
      the perfigo.com FAQ says it much better than the article:
      Perfigo offers network security and control solutions that strengthen network security and resilience by regulating access based on user and device compliance with security policies. The CleanMachines product is a software solution from Perfigo that automatically detects, isolates, and cleans infected and/or vulnerable devices that attempt to access the network. It identifies whether machines are compliant with security policies and repairs these vulnerabilities before permitting access to the network.
  8. Re:More monopolization by Anonymous Coward · · Score: 0

    Hmmm...I thought the problem was Bush. Oh my bad...same thing.

  9. Re:More monopolization by w1r3sp33d · · Score: 4, Insightful
    If they choose to buy up the best company in each market, they have still left many others to compete against them in each market.

    I could choose: Nokia firewall, Juniper router, HP switches, Brocade SAN, and M$ radius server or I could cut one check to Cisco and get pretty much all the same function out of a combination of their boxes.

    I'm not saying that it is right or wrong, but it is not a monopoly.

  10. Does your site use perfigo? by Anonymous Coward · · Score: 0

    Quick survey. Does your organization use perfigo? or bluesocket?

    1. Re:Does your site use perfigo? by Anonymous Coward · · Score: 0


      My site uses Roving Planet, which I believe has very similar functionality but went deeper in the network monitoring aspects then the others

  11. lol by Anonymous Coward · · Score: 0

    I can just see it now: Linksys routers with stickers that say 'Perfigo Ready.'

    Good thinking, gumshoe!! :p

  12. Re:More monopolization by ImaLamer · · Score: 4, Insightful

    Cisco joins a long chain of American companies who buy out the little guy, thus increasing monopolization. There should be laws against this sort of thing

    Cisco does not have a chance at monopoly status. They also aren't buying a rival router manufacturer, just acquiring a company which will add to their technology portfolio.

    But, monopolies in themselves aren't illegal. I learned that in the third week of "economics". It is the actions of companies that get them into trouble. The definition of monopoly in my econ book reads something like: One business that can fulfill market demand at cheaper prices than two or more companies.

    Basically, it can be good for the consumer in some cases (think gas & electric) which is why being a monopoly isn't illegal. It's when others try to take your sole status and you crush them and the innovation they would bring to the table...

  13. Re:Being a Republican is a mental illness by Anonymous Coward · · Score: 0

    And I've always wondered why liberals resort to fit throwing when they don't get their way.

  14. Is everyone blind or something? by yonatanh · · Score: 0, Offtopic

    I honestly cannot understand how: 1. This article was accepted with the typo - it's acquire not aquire. 2. Nobody else noticed this error. Weird isn't it?

    1. Re:Is everyone blind or something? by Fnkmaster · · Score: 1

      I'm sure 10 subscribers emailed the "on call" editor, but if you haven't noticed, they rarely check their emails before letting the story go up.

    2. Re:Is everyone blind or something? by Anonymous Coward · · Score: 1, Funny

      Dont worry prob just that the launguage is changing again and the dictionary just has not been updated yet.

    3. Re:Is everyone blind or something? by e9th · · Score: 1

      Yep. For example, my dictionary is missing dont, prob and launguage.

    4. Re:Is everyone blind or something? by numatrix · · Score: 4, Funny

      You can't understand it? It's quite simple. See, there's this website called Slashdot. What happens there is four or five people post the same story to the site. The shortest, most incoherent submission is further mangled by one of the editors and posted to the chosen (by their wallets) ones for an early read. These readers in turn notify the appropriate editor of half a dozen changes, suggestions, and fixes, all of which are ignored when it is posted to rest of the site.

      Then some smart aleck in the comments doesn't have anything meaningful to say about the story itself, so he posts an amazed comment about how such an obvious typo could make it through the ever so thorough vetting process.

      This is of course followed up by an even worse smart aleck who 'educates' the previous user and the entire thread is subsequently modded as not-funny and off-topic and hopefully removed from the visible comments for most users.

      Welcome! Hope you enjoy it here. Oh yeah; almost forgot. You're supposed to make a spelling typo in your spelling correction so that other people can ridicule you too. All part of the fun.

    5. Re:Is everyone blind or something? by Anonymous Coward · · Score: 0

      what are you talking about the spelling looks good to me its probably no worse than someone who types an entire thought in a simple line ok maybe i'm wrong

    6. Re:Is everyone blind or something? by jd · · Score: 1
      I think it has more to do with the fact that, whilst Slashdot is the premiere sci/tech/geek news site, it is neither a peer-reviewed science journal nor a library of PhD theses.


      Hey, some of the stories I've put in have had far worse errors (the human genome story, for example, mixed gene and genome quite horribly). With the exception of the story I submitted on SGI's OB1 code dump, I can't recall any story I've put in where an error has actually caused confusion. Irritation, sure. Snide comments on my proof-reading skills, IQ or relationship to the human race, yes. But confusion or incomprehension, no.


      In comparison, a typo on 'acquire' is almost nothing. I say almost, because buggy text-to-speech translators might decide they were talking about a group of Christian church singers.


      As for the owners of Slashdot, I'm guessing from the existance of such errors (and the existance of the occasional dupe) that they're more concerned with a high throughput of quality news, than a low throughput of quality prose. The only ones who can really say for sure are the Slashdot staff themselves, but from everything I've seen, I think it's safe to say my guess isn't too far off.

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    7. Re:Is everyone blind or something? by Malor · · Score: 1

      Actually, you should make a spelling mistake when correcting grammar, and a grammar mistake when correcting spelling. That way, ALL the nazis leap in and great flamage ensues.

      Slashdot really does seem to ignore error reports.... I have seen typos and problems on numerous occasions, and have reported them, and I don't think I have EVER seen a story change in ANY way from preview to release. Well, ok, I saw a broken link get fixed once, so I've seen it one time. But that was it; no spelling corrections, no summary fixes when the submitter got it completely wrong.

      They also seem to refuse stories with Coral cache links. Apparently, making sure a small site doesn't get slashdotted is no good.

      I, for one, am tired of seeing my subscription dollars go to this kind of poor effort. I haven't seen Slashdot really change or grow or improve for the last four years... their 'sections' are the 'big improvement', when really it's just the same old crap in ugly colored boxes. None of the other problems have been fixed; there are still dupes, the search is largely useless [can't even search on multiple keywords properly!], the editorial standards are low, and they actively defend their policy of DoSing small sites. [which is the proverbial straw for me, they've had YEARS to figure this problem out.] And the site's not very reliable. It's down a lot. Always briefly, but I get error messages (often 550 Service Unavailables) very frequently.

      In 1998, this was pretty acceptable, but they've been a 'pro' site for years now. Asking for subscription money implies, I think, a higher standard. I have subscribed since they started subscriptions, and have given them quite a bit of money. But when my subscription lapses this time, no more, unless and until they show signs of actually improving again.... of actually caring. I can think of much better ways to waste money.

      Yeah, I know this is -1 Offtopic, but it's worth some karma points to vent a little.

  15. Re:More monopolization by Orestesx · · Score: 2, Insightful

    The purpose of any company is to make a bunch of money. I'm not sure what your point is. I think it's great when a large company such as Cisco can bring a promising but under-utilized technology to market by acquiring a company. If this leads to fewer ddos's, great.

    On another note, there's a great gem of market-speak in this pr:

    "CleanMachines' turnkey approach directly complements Cisco NAC, which leverages a systems architecture approach that is more appropriate for Enterprise customers."

    Why is "Enterprise" capitalized?

  16. Slashdot challange! by WhatAmIDoingHere · · Score: 4, Funny

    Can we /. Cisco?

    If we manage to do it, I will be very impressed.

    --
    Not a Twitter sockpuppet... but I wish I was.
    1. Re:Slashdot challange! by _Hellfire_ · · Score: 3, Funny

      I doubt it - they've got more bandwidth than god.

      --
      "And then I visited Wikipedia ...and the next 8 hours are a blur..."
    2. Re:Slashdot challange! by WhatAmIDoingHere · · Score: 1

      It's not how phat the pipe is, that matters, it's how you use it.

      --
      Not a Twitter sockpuppet... but I wish I was.
    3. Re:Slashdot challange! by jd · · Score: 1

      Cisco has more bandwidth than Torvalds?* We need to do something about that. Also, we may need more *BSD developers on Slashdot, then. DaemonNews was covering a story, a while back, about them managing 5 or so petabits over Internet 2. Can you imagine the impact, if the Slashdot Effect could get into this kind of range? :)


      *For those new to the Linux scene, one of Linus Torvald's better-remembered opening lines at a convention was: "I am Linus, and I am your god."

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    4. Re:Slashdot challange! by GoogleBot · · Score: 1
      What?!?! They have more bandwidth than me?!?!

      Ha! Wrong again, meatbags!

      --
      GoogleBot

  17. All I see... by eingram · · Score: 3, Funny

    I can just see it now: Linksys routers with stickers that say 'Perfigo Ready.'"

    I just see more open WAPs myself. =D

  18. Re:Being a Republican is a mental illness by Anonymous Coward · · Score: 0

    I've often wondered why Republicans attack, kill and destroy anything that they fear.

  19. Re:More monopolization by huber · · Score: 0

    Yeah cause the gas and electric monopolies produce a real affordable product.

  20. Re:More monopolization by Anonymous Coward · · Score: 2, Interesting

    And the alternative produces rolling california blackouts. Point: utility monopolies.

  21. Not only that by ccharles · · Score: 1

    Not only that, but apparently

    Perfigo is a developer of packaged network access control solutions...

    (Emphasis mine).

    1. Re:Not only that by Anonymous Coward · · Score: 0

      ummm... that's how you spell developer.

  22. Re:More monopolization by CestusGW · · Score: 3, Informative

    The situation you're thinking of is the one where competition produces overlap, redundancies and inefficiencies. In Canada, for example, Rogers has a monopoly on the installation, maintenance and management of cable TV lines. They can also sell cable access over these lines, but so can everyone else. Bell has a similar monopoly over telephone infrastructure, but other companies can sell services over this infrastructure. This is because having two companies put down phone lines down the same street is inefficient - you only need one phone line, not two. Having only one phone line benefits the consumer. Having only one company sell services over the phone line does NOT benefit the consumer.

    --
    Too much repetition my too much repetition!
  23. Thanks! by ljavelin · · Score: 2, Funny

    Thanks for the nice press release. Notice how the Perfigo website didn't make the posting - Maybe Perfigo was in fear that it'd stuffer from the /. effect?

    1. Re:Thanks! by Anonymous Coward · · Score: 0

      Perfigo stock is BUY BUY BUY!!! OSTG gets 10%.

    2. Re:Thanks! by matguy · · Score: 1

      Ummm, Private company, no public stock I believe.

      --

      matguy(.com)
    3. Re:Thanks! by jd · · Score: 1

      Which means your evil, evil post containing a link to them has utterly ruined their efforts to keep online the rest of the night. You do realise that, by posting the link, Cisco now owns exactly one large crater where the server room once stood, plus the obligatory pair of smoking boots?

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    4. Re:Thanks! by Anonymous Coward · · Score: 0

      Private company, no public stock I believe.

      Um, and that implies no money and no technically sound or capable web site?

      I thought this was a technology company. I thought it was a networking company! WTF???

  24. aCquire by Anonymous Coward · · Score: 0, Offtopic

    Use a fucking spellchecker.

  25. um by el_guapo · · Score: 1

    Cisco has a history of buying small companies to increase their product lineup for as long as i can remember. Kalpana, Stratacom, etc etc etc - FYI

    --
    mas cerveza, por favor politically incorrect stu
  26. Actually... by Anonymous Coward · · Score: 0

    ...we all noticed, we just thought we'd let you make an ass of yourself by being a whiny little bitch about a minor typo.

  27. around THIS house... by Anonymous Coward · · Score: 0

    ...young fella, we cut down our use of cisco, thank you very much, and switched to polyunsaturates without hydrolysed vegetable oils. Yes, I know them biscuits don't work as good, but really, if you want REAL merakan biscuits, real honest to goodness creamy chewy gut bomb gourmet goodnesses, go for the gusto and use pure lard! For everything else, pure virgin olive oil!

  28. somewhat by mnemonic_ · · Score: 1

    The Sherman Act has been mostly understood as forbidding monopolies gained through illegal means. In the Supreme Court's eyes, legitimate monopolies can exist that do not fall under the Sherman Act. In those cases, they see the Sherman Act as unapplicable fundamentally; enforcement of the Sherman Act is not the issue, rather, the judges actually disagree on whether the Act applies in the first place.

  29. VLANs by macdaddy · · Score: 4, Interesting

    Don't forget VLANsm. Yes, I know they didn't technically invent them but it their entirely fucked up implementation that we're stuck using today. Use of Cisco's pre-standard implementation of VLANs was so widespread that the IEEE working group for 802.1Q had to more or less disregard all other implementations, some superior and some not, and give a thumbs up to to Cisco or they risked writing a standard that no one would use because the world's largest LAN infrastructure company wanted to do it their own way. Think of it like Microsoft deciding to ignore the W3C's newest HTML or XML standard and writing their entire suite of applications to embrace their own competing standard. In the end Cisco's VLAN implementation is what we're stuck with and it sucks when compared to what we could have had. Cisco's implementation didn't even have rudimentary authentication built into the standard. 802.1Q devices implicitly trust the VLAN advertisements they get on a trunk port as gospel. Thanks Cisco for fucking this up. We netadm's sure do appreciate it.

  30. Re:More monopolization by ShinmaWa · · Score: 1

    Cisco, for years, has aquired many smaller companies

    At least we are consistent.

    --
    The /. Effect: Thousands of users simultaneously accessing a site to not read its content.
  31. Or, as John Cleese would say... by jd · · Score: 1

    Apart from (extremely long list), what have the Romans ever done for us?

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  32. Re:Wow... by bcreane · · Score: 2, Funny

    Yea, I found the article boring when scanning superficially. But after reading the perfigo site faq, its clear there's a potential for "synergy" between cisco and perfigo's products. It may be one of those [very] rare acquisitions that adds value for investors (and customers).

  33. Please discontinue Perfigo's products by RR · · Score: 3, Interesting

    At UCSC, we use Perfigo's SecureSmart servers for making it safe to plug the students' computers into the school network. It's bad.

    The server is constantly going down. Get this: It checks every 6 hours to make sure that it's currently registered. Frequently, it forgets that it's registered or Perfigo's registration server scrambles its licenses or something, because the dorm network then goes down. This happens about once per week.

    The system is based on a router running Red Hat 7 on commodity x86 machines. Last I heard, it was still using Linux 2.4.9. The upgrade procedure is a drive reimage. The actual routing goes on in a proprietary routing program with fairly low performance. The scanning is done with a customized Nessus. The administration is some custom PHP (IIRC) code, with no security roles and complete control via a single password.

    Furthermore, the source to the free software they use, they refuse to send to the customer. Somebody really should see if they can sue Perfigo for violation of the GPL.

    Ignoring the above, the Resnet administrator has set up the SecureSmart server to scan PCs for the usual Windows problems. If it finds one, he has it set up to let the user see only antivirus pages and Windows Update. Then it's supposed to scan the user's computer again after 24 hours. What usually happens is that the user's computer doesn't get an IP address anymore, ever, and the administrator has to unblock the specific MAC manually (using his single password).

    I'm guessing that we're still using it because the administrator feels that he has invested too much effort into it already. I don't know exactly what Cisco was thinking. Perfigo is just a bad investment.

    If you're also going to UCSC, you should check out https://api.alkaid.org/ It's currently a bit out of date, but it shows that the administrator should have known not to use Perfigo.

    --
    Have a nice time.
    1. Re:Please discontinue Perfigo's products by I+kan+Spl · · Score: 2, Funny

      Not only that, the perfigo boxes can be horribly confused, fairly easily.

      In one instance the SecureSmart server was convinced that my Linux laptop was infected with a doze virus...

      --
      My UID is prime and so is this number: 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0.
    2. Re:Please discontinue Perfigo's products by Anonymous Coward · · Score: 0

      2 points.

      the upgrade process does not require a drive reimage

      gpl code is available to customers

    3. Re:Please discontinue Perfigo's products by GPSguy · · Score: 1

      Actually, my evaluation of the Perfigo hardware in a set of controlled, and "in the wild" tests at TAMU sound they were reliable and worked well. I suspect the note on the alkaid.org site, saying the on-campus implementation was flawed, was closer to the truth.

      --
      Never ascribe to malice that which can adequately be explained by tenure.
    4. Re:Please discontinue Perfigo's products by mplex · · Score: 1

      We also use Perfigo at our University and have had almost zero problems past the first week. I have a feeling the admins there either have their server misconfigured, without enough ram, or some other mistake that is making it crash because ours is rock solid without a reboot since August. As far as your GPL concerns, there may be some but I'm just concerned with the stability of the platform which has been great for us.

    5. Re:Please discontinue Perfigo's products by j35u5 · · Score: 1

      The same thing was recently put in place at the University of Tulsa with the same results. Perfigo is horrible and has made our unreliable network even more so. A friend of mine wrote script so that Linux boxes will automatically login to the system, since a lot of people don't regularly use a browser on their Linux boxes. It only becomes clear that Perfigo has shutdown your internet when you try to ssh in or access a webpage hosted on the box and can't.

    6. Re:Please discontinue Perfigo's products by DRAGONWEEZEL · · Score: 1

      That's not entirley correct. I had the opportunity to see a rapid implimentation of this over the summer(only from a tech's perspective...), and while it was not easy, it was necessary due to the EXTREME number of machines that come in drasticly infected. I don't think I ever fixed that many machines in my entire life, and all in a matter of days.

      The only problem I see w/ perfigo is that it doesn't prevent new infections, but is there anything out there that does?

      Sure, there may be better ways... I am no security expert. (I thought I was, but that's a whole other post.)

      --
      How much is your data worth? Back it up now.
    7. Re:Please discontinue Perfigo's products by RR · · Score: 1
      We also use Perfigo at our University and have had almost zero problems past the first week.

      I have to wonder whether you're actually using your system from the students' perspective, because people are used to taking a lot of abuse without complaint. See Bill Gates' comment some years back about Microsoft software not having any significant bugs. See also your term, "almost zero problems".

      A friend of mine administers the network at another university, where they use Perfigo's system, on hardware that Perfigo recommends, only for the wireless segment. He says that it's really slow there, and its interface is very clunky, and it just doesn't work well. Furthermore, the company doesn't respond very well to requests for customer support.

      However, they did respond with legal threats when he voiced his complaints in a public forum, and he's now too scared to say anything publicly against them. I'm sure that that gives a particular bias to comments in other public forums like this one.

      --
      Have a nice time.
    8. Re:Please discontinue Perfigo's products by Anonymous Coward · · Score: 0

      "What usually happens is that the user's computer doesn't get an IP address anymore, ever, and the administrator has to unblock the specific MAC manually (using his single password)"

      I call bullshit. The DHCP service is standard ISC DHCP server that runs on each SmartServer and is in no way tied into Perfigo's java bloatware software agent that runs on the SmartServers.

      "Ignoring the above, the Resnet administrator has set up the SecureSmart server to scan PCs for the usual Windows problems. If it finds one, he has it set up to let the user see only antivirus pages and Windows Update. Then it's supposed to scan the user's computer again after 24 hours. What usually happens is that the user's computer doesn't get an IP address anymore, ever, and the administrator has to unblock the specific MAC manually (using his single password)."

      Ask your administrator to properly configure the damn thing. If you put a logout button at the bottom of the CleanMachines quarantine page the user can click logout. They will then be presented with the login page whenever they try to go anywhere with a web browser and be asked to login again. The CleanMachines scans happen whenever a user attempts to login. And since the systems that were previously in the quarantine role are not in the certified devices list it _will_ scan them again and hense reevaluate them.

      And of course if you were using SmartEnforcer this would all be moot because if you did your homework and set up a proper set of rules you could lead your users through fixing their damn problem with the client side app.

      "I'm guessing that we're still using it because the administrator feels that he has invested too much effort into it already. I don't know exactly what Cisco was thinking. Perfigo is just a bad investment."

      I'm in the other boat. I'm wondering wtf Perfigo's owners were thinking. Cisco has a horrible track record with software packages. I like their hardware, I like IOS, I detest every other bit of software they have ever written. Horrible horrible java based crud (PDM that eats firewall rules or just displays plain garbage) or overcomplicated tools like ACS (the policy server for NAC) that turn out to be Windows only and show a complete lack of UI designers on the development team.

    9. Re:Please discontinue Perfigo's products by Anonymous Coward · · Score: 0

      We've had similar issues here with Perfigo. Its totally not GPL compliant. Taking open source software making some tweaks to it and then not releasing the source to ANYONE is not cool. They "accidently" expired our licenses and it took almost a week to get our wireless network back up. The final straw is them not making updates that function as updates and don't require reformats and rebuilds to implement.

  34. Re:More monopolization: funding by Anonymous Coward · · Score: 0
  35. For a moment.... by Nonillion · · Score: 1

    I thought that read Crisco aquires Perfigo?????

    --
    "I bow to no man" - Riddick
    1. Re:For a moment.... by Plaid+Phantom · · Score: 1

      Now that would be interesting... Perfigo All-vegetable network security, now with 0 grams of trans fat per serving!

      --
      All comments are properties and trademarks of the voices in my head. Not like I'm gonna claim them.
    2. Re:For a moment.... by Anonymous Coward · · Score: 0

      Ease back on the reefer.

  36. Perfigo SmartEnforcer by ComputerSherpa · · Score: 2, Informative
    Yep, my university now uses Perfigo. Last year we had a flood of worms, viruses etc. that nearly shut down our network. This year we implemented Perfigo SmartEnforcer on all student computers to keep that from happening again. SmartEnforcer basically scans the computer it's on and determines whether Windows Update and Norton Antivirus are up-to-date; only if they are will it allow network access. Only problem is that most of our student's aren't up-to-date, and can't follow our simple directions for updating their machines. Result: Lots of time spent in front of student computers watching progress bars, clicking "Next" a half dozen times, and trying to fix the scuzzy thing when it inevitably breaks.

    I haven't decided which is worse: the problem or the solution.

    --
    Information wants to be anthropomorphized!
    1. Re:Perfigo SmartEnforcer by matguy · · Score: 1

      Which University, if I may ask?

      --

      matguy(.com)
    2. Re:Perfigo SmartEnforcer by ComputerSherpa · · Score: 1

      Azusa Pacific University, near Los Angeles.

      --
      Information wants to be anthropomorphized!
    3. Re:Perfigo SmartEnforcer by Anonymous Coward · · Score: 0

      ASU is also rolling out Perfigo. they started a while ago, but they are starting to put it in more and more places

    4. Re:Perfigo SmartEnforcer by Anonymous Coward · · Score: 0

      Yeah, Perfigo seems to have some large universities that have rolled out CleanMachines this fall.

      We are looking at purchasing Perfigo and after speaking to quite a few of these Universities they all seem to be estatic at how much more stable their networks have been this year. They also mentioned that with the SmartEnforcer's ability to guide the student to patch their machines they have noticed a considerable drop in helpdesk calls.

      Oh how I wish we had implemented this before the fall term started. I feel like have aged many years over since then ;-)

  37. Who has the bigger pipe? huh-huh by tepples · · Score: 1

    Cisco has more bandwidth than Torvalds?* We need to do something about that.

    The pipe to the server containing Linux has at least 1 Gbps of sustained throughput. How big is Cisco.com's pipe?

  38. Re:Wow... by matguy · · Score: 1

    Perfigo's products are really pretty good, and if they can get the testing and R&D support of Cisco behind them, it'll be a good thing in my opinion.

    --

    matguy(.com)
  39. Re:Poopcock veterans for *BSD Poop by jd · · Score: 1

    Myth: The *BSDs collectively used the claims that they were dead to cash in on their life insurance policies. This made them all incredibly rich and powerful. Further, being dead caused an unexpeted inline merge with God, causing some machines to become omnipotent. (How else do you explain an Intel-based OS blasting five petabits down a network?)

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  40. Linksys products are now due for a long long name. by Andrew+Dvorak · · Score: 1

    In my router configuration it says "Linksys, a division of Cisco."

    will this now become:

    "Linksys, a division of Cisco. Perfigo ready!"

    at what point will Cisco stop? I can see it now "Cisco acquires Sysco" (Where Sysco will be its retail arm.) --

    "Linksys, a division of Cisco. Perfigo ready! Distributed by Sysco."

  41. Of course. by Tei · · Score: 1

    I think even Cisco will use normal servers for normal task, like webservers. Will be a dificult one, maybe the more dificult, but circo will not use akamai or other ninja tool, so a good slasht can break is server.

    Anyway I think this news is not interesting enough to drive the trafik needed.

    --

    -Woof woof woof!

  42. RESNET issues by MarcQuadra · · Score: 1

    We've got a similar setup with our 'campus manager' 'solution'. I swear, it causes more trouble than the benefits it provides.

    RESNET admins, for the most part, are generally control freaks who lack the skills to track down problems on their own, have no idea how to fix them, and need vendors and consultants to handle everything. It usually has a lot to do with occupational succession in a school environment, I think.

    Anyway, we're already wasting resources on our 'remediation server' for next year, and our plan, no joke, is to keep all users at XP SP1. FOREVER. We're going to disable the firewall on SP2 machines, opening up our number-one defense from worms, just so we can brag about having 'remediation capabilities'. Oh yeah, our registration system binds to the MAC address, so we have no way to allow wireless in the dorms or student areas.

    I keep telling them that the best way to handle the network is to allow all access, but place a small sniffer on every subnet. When something goes horribly wrong we can look at the sniffer to see the source MAC address, then look up the port for that MAC addy on the switch management software and head to that room to fix the problem.

    There's no point in investing hundreds of admin man-hours every year to get registration and remediation running when we can get similar results from a few dozen hours of desktop support.

    --
    "Sometimes, I think Trent just needs a cup of hot chocolate and a blankie." -Tori Amos on Nine Inch Nails
    1. Re:RESNET issues by Allyn+Crowe · · Score: 1

      "RESNET admins, for the most part, are generally control freaks who lack the skills to track down problems on their own, have no idea how to fix them, and need vendors and consultants to handle everything. It usually has a lot to do with occupational succession in a school environment, I think."

      I take some serious offense to this broad statement. In reality many ResNet admins are overworked, understaffed, underbudgeted, and given more computers to handle than most other roles out there. Given that these admins are required to handle a large number of student computers which are generally more infested with viruses, spyware, bloatware, adware, and varying other programs that cause the computer to run slower than my DX4 leads to a sense of frustration with student machines and the students who own them.

      Perfigo offers a solution that helps deal with the students who insist their computer is clean of all viruses because they are running antivirus (course its Norton from like 10 years ago and has never been updated).

      As a ResNet administrator myself I am forced to handle all sorts of things that as a corporate Network Admin I never had to. Things like calls from student's parents cause their little Johnny can't get on the internet (its called using Ethernet Cable not a Phone cable) and DMCA complaints because students insist the have a right to illegally download and share music and videos. Heck I spend most of my time these days working with our bandwidth shaping so that the students who want to use the network for what it was meant to (web, games, chat, etc) can. instead of the few who insist on trying to do everything they are told not to (DOS, network scans, ping floods, etc) bringing the network to its knees.

      As for the rest of your rubbish about not being skilled, blah blah blah... Instead of attacking all ResNet Administrators, why don't you try being a ResNet admin for a week during fall opening? Have you ever tried to move in a couple of thousand computers in varying states of decay in 3 days? Try walking a mile in the admin's shoes before you say they are all control freaks who just want to control everything.

    2. Re:RESNET issues by neouser99 · · Score: 1

      I agree every bit with you. Where I am not a ResNet admin, I work directly with them and actually end up helping them most of the time. The previous guy mentioned allowing everyone access, I don't know what kind of bandwith they have...but we would not be able to allow one person full access if their machine is contributing to floods or virus propegation...it just doesn't work. At the same time, I do not agree with perfigo. From what I have seen it just doesn't work. We simply run the scans our selves, and setup a virus v-lan so that students may attempt to clean themseleves before they are allowed back on our network. Works much better then having to worry about an extra machine that has the potential to bring the entire network down if one of a thousand things go wrong.

    3. Re:RESNET issues by MarcQuadra · · Score: 1

      OK. My apologies. I _DO_ work in a resnet environment, so I know what it's like. I'm sorry for generalizing, almost all resnet folks are overworked and underbudgeted. But I also see a lot of old-school thinking that prevents implementation of modern solutions. I see a lot of 'lets find a vendor instead'.

      --
      "Sometimes, I think Trent just needs a cup of hot chocolate and a blankie." -Tori Amos on Nine Inch Nails
  43. NetPass by jeffmurphy · · Score: 1

    NetPass is an opensource alternative that's rapidly approaching 1.0 status.

    1. Re:NetPass by DenisEdwards · · Score: 1

      Is there any documentation available for NetPass? I didn't see any on the site. I'm interested in how the quarantine is handled. Is this a netreg type solution? Thanks in advance for the assist.

  44. We use Perfigo here by landimal_adurotune · · Score: 2, Interesting

    Small colleges like the one I work at do not have the bandwith/resources to weather a huge worm/virus/ddos hit so we evaluated Bradford, Perfigo, StillSecure and Cisco's products. Cisco was ~100,000 and we'd have to put in end to end switches, we're a all-girl liberal arts private college so that is out of the question money wise. Bradford didn't understand the impact of firewalls on the market (at the time, they've changed their tune recently). StillSecure has a great roadmap, but a 5 year old could get around the security. Perfigo was the best of what was out there, and we did have the disconnect problems described by the previous poster, but we worked with Perfigo and got everything fixed, no issues at all since the last (and did not have to re-image like the previous poster said) 10-minute patch. My fear is this: Perfigo's reporting engine was/is terrible, Cisco is not known for UI improvements, hell not even known for a UI. Plus, we got a great deal from Perfigo, they were understanding to our situation and worked on the price, Cisco could give a rats ass about our business, so I fear we'll not be able to afford Perfigo in the future. Perfigo has amazing support, and most people that I talk to that complain about their installation have never called Perfigo to work with them on the problem. Three months into the school year, we've had 0 worms hit us, 0 DDoS attacks going outbound, and we know that no rouge access points are connected to our tiny internet pipe (ok there is one was to get one set up, but this is a liberal arts college, kismet shows nothing out there).

  45. Band-aid by 99BottlesOfBeerInMyF · · Score: 1

    Gee, Cisco bought another bad-aid partial solution to the worm and virus problem, that only addresses symptoms and does not have any hope of working on a zero-day worm in a production environment. That is what, five they have bought now, none of which solve the problem?

  46. Re:Being a Republican is a mental illness by Anonymous Coward · · Score: 0

    'cuz we'll put a boot in your ass its the American way.

  47. Re:Linksys products are now due for a long long na by Anonymous Coward · · Score: 0

    Here in Ohio.. Sysco is a food distribution network. Delivering food stuffs to wholesalers/retailers/and food service places..