Re: [FW1] OT - Real Secure false positives?

[Carric Dooley <carric@FW1-NOSPAMcom2usa.com>]

Given current IDS technology, you will see false positives no matter what
you use.  If you get rid of all your false positives, you will start
missing attacks.  You may want to take a look at Bruce Schneir's new book
"Secrets & Lies".  He discusses this at length.


Carric Dooley
Senior Consultant
COM2:Interactive Media

"But this one goes to eleven."
-- Nigel Tufnel


On Tue, 26 Sep 2000, Tom Sevy wrote:

> 
> With recent versions of Real Secure, how likely are you to see false
> positives?
> 
> I am seeing PingFlood, SynFlood, TFN2000 warnings, but when I check them, I
> never find them in my FW logs.
> 
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
> 



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================