Security Basics mailing list archives

Help!I'm being DoS'ed by our own stupid SIM!!


From: scott <redhowlingwolves () bellsouth net>
Date: Tue, 19 Jun 2007 01:20:36 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Our CIO insists on using this app...   ArcSight's Threat Response
Manager is causing WAY more headaches then security.I don't have time to
do what I should be doing,because this BEAST thinks normal network
activity is hostile!

A weapon in one hand or a turd in the other,the way I see it!

Rant over!

Please DO NOT let anyone talk you into trying this.It finds so many
false positives,it will throttle your bandwidth to a point where it is
unusable!

I know ArcSight will get mad about this post,but truth be told"Get a
Grip,PLEASE"!

Help,not hurt your fellow bro's here!

Anyway,Hope this helps,
    Scott
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGd2ekelSgjADJQKsRAgMOAKCyw/18sPiu/48oxPLN2snMJFE4nACaAgps
YNviYot5xdv6SZzYEHYEGC0=
=cg1S
-----END PGP SIGNATURE-----


Current thread: