|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Best IDS??
I cant disagree, but if you will take the time to learn how to add your own signatures Real Secure is by far the most robust IDS I have ever used. I personally do not use anything else as I have not found a need to with my signature additions. The only way to know thy enemy is to have learned his ways. Sun Tzu Regards David Phillips CISSP MCSE Ft Worth, TX 76112-----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of John Ryan Sent: Monday, December 17, 2001 8:03 AM To: [email protected] Subject: Re: [FW-1] Best IDS?? Tim, Don't rely on a single source solution. Dragon is an excellent system that is worth loking at. Snort is great as a secondary system. Look at Entercept for host based IDS / firewall to protect critical servers. Consider using a central logging facility such as netForensics. It will pull all of your alerts into a central console. Very nice. NFR is a great forensices tool as it sucks up all of the network traffic and allows your to analyze what happened. Real Secure is weak. It doesn't scale, support is poor, updates are very slow. ----- Original Message ----- From: "Tim Anderson" <[email protected]> To: <[email protected]> Sent: Thursday, November 29, 2001 12:15 PM Subject: [FW-1] Best IDS?? > We have budget to purchase an IDS and would like to get suggestions from you > fine folks. We are looking at SNORT since it is free (except for the > equipment costs) and ISS Real Secure. We are open to other suggestions as > well. Also where do you guys have your sensors? We were thinking that > having one on the DMZ is probably enough but we want some input from others > before we decide. Thanks! > > Tim Anderson > > =============================================== > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > =============================================== ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= If you have any questions on how to change your subscription options, email Ron Alcatraz at: [email protected] ================================================= ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= If you have any questions on how to change your subscription options, email Ron Alcatraz at: [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
