News Proofpoint cybersecurity

[Apple5000]

https://help.ui.com/hc/en-us/articles/25930305913751-UniFi-CyberSecure-by-Proofpoint

What do you think? Thanks.

 

[Tech9]

Not news. This is paid service for IDS/IPS rules. Ubiquiti gateways use Suricata for IDS/IPS, default included rules are updated once a day with 36 categories, Proofpoint is updated more frequently and offers up to 53 categories. CyberSecure package is $99/year, CyberSecure Enterprise is $499/year. The price is acceptable for someone who needs larger signature base with better reaction time.

 

[Apple5000]

Does Suricata use proofpoint?

 

[Tech9]

Proofpoint is not a product. It's the company behind the product called CyberSecure. The product itself is frequently updated and expanded signatures for the built into Ubiquiti gateways IDS/IPS system. The system itself is based on Suricata open source software.

Enterprise Cybersecurity Solutions, Services & Training | Proofpoint US

Proofpoint helps protect people, data and brands against cyber attacks. Offering compliance and cybersecurity solutions for email, web, cloud, and more.

www.proofpoint.com

Home - Suricata

suricata.io

If it's not clear enough already - you have to have Ubiquiti gateway to get this product at this price point. I'm assuming any system running Suricata can use CyberSecure signatures, but this is sort of bundle deal for Ubiquiti gateway owners. For gateways (also called firewalls) running OPNSense, pfSense, Arista, etc. the deal may be different. Lower or higher price - I don't know. Many security companies provide subscription based signatures (also called firewall rules) for popular IDS/IPS systems based on Suricata or Snort.

I've seen users asking for better IDS/IPS signatures on Ubiquiti Community forums, Ubiquiti added it as an option after Network Application update 4.1.3. I personally have no interests in this product, but perhaps $99/year is sort of special deal and some users may find value in it. For home system - perhaps not needed. For a business with more critical data - why not, it's actually not expensive.