RE: Seeking IDS Recommendations

["Vic N" <vic778 () hotmail com>]

I *highly* recommend the Mazu Profiler:

http://www.mazunetworks.com/products/mazu-profiler.php

After an extended evaluation of IDS/IPS products, this product was the 
hands-down top performer for my company.  It is fantastic for both security 
and compliance issues, proven itself to be effective in zero day events and 
leverages existing Cisco equipment (via netflow) nicely.

Since it isn't tied to traditional signature-based IDS, I've been able to 
leverage the system to perform other duties like tracking down p2p traffic 
and misconfigured equipment.

Call them for the demo, if nothing else, they'll set a high bar for you.

Goodluck!

Vic


> Hi All,
>
> Can you folks recommend a WAN-wide IDS solution? We are mostly a Cisco
> shop, so I was considering the MARS system, since I can avoid
> installing more IDS sensors by plugging into the Cisco firewalls.
>
> I still need other options. I'm seeking a quote from Sourcefire, but
> that will require a sensor per shop - and we have 7 shops and growing.
>
> Here is what I'm looking for:
>
> IDS capability in each shop - sniffing at each gateway.
> Thin clients on each laptop and workstation.
> Thin client on each server.
>
> Thanks for your help folks,
>
>
> Michael Casale
> A+, Novell, Cisco CCNA Certified
> Network Administrator
> Applied Technology and Management
> 2770 NW 43rd St. Ste. B
> Gainesville, FL 32606-7419
> (352) 375-8700 x 346 (office)
> (352) 359-1797 (cell)
>
>
> The information contained in this message and any attachment to it may be 
> privileged, confidential or otherwise protected from disclosure. If you are 
> not the intended recipient, you are hereby notified that any dissemination, 
> distribution or copying of this communication is strictly prohibited. If 
> you have received this communication in error, please notify the sender 
> immediately by replying to the message and please delete it from your 
> system. Please also note that any views or opinions presented in this email 
> are solely those of the author and do not necessarily represent those of 
> the company.
>
>
> ---------------------------------------------------------------------------
> This list is sponsored by: SensePost
>
> Hacking, like any art, will take years of dedicated study and
> practice to master. We can't teach you to hack. But we can teach you
> what we've learned so far. Our courses are honest, real, technical
> and practical. SensePost willl be at Black Hat Vegas in July. To see
> what we're about, visit us at:
>
> http://www.sensepost.com/training.html
> ---------------------------------------------------------------------------



---------------------------------------------------------------------------
This list is sponsored by: SensePost

Hacking, like any art, will take years of dedicated study and  
practice to master. We can't teach you to hack. But we can teach you  
what we've learned so far. Our courses are honest, real, technical  
and practical. SensePost willl be at Black Hat Vegas in July. To see  
what we're about, visit us at: 

http://www.sensepost.com/training.html
---------------------------------------------------------------------------