Educause Security Discussion mailing list archives

Intrusion Detection/Prevention Devices and Worms


From: Andrew Watson <AWATSON () COLORADOCOLLEGE EDU>
Date: Wed, 27 Aug 2003 14:45:34 -0600

Has anyone had success using intrusion detection/prevention devices to
help with the recent MS worm outbreaks?  We were fortunate to be
evaluating a device from Tipping Point Technologies (www.tippingpoint.com
<http://www.tippingpoint.com/> ) when the worms hit.  It has been a very
helpful tool for identifying and stopping propagation of the worms, but I
have found that its reporting capabilities are very weak.  Any advice or
experiences would be greatly appreciated, as we will probably go ahead and
purchase a device like this before our evaluation period ends.
 
Sincerely,
 
Andrew Watson
Sr. Systems Administrator
Colorado College
14 E. Cache La Poudre
Colorado Springs, CO 80903
Email: awatson () coloradocollege edu
Phone: 719.389.6733
Fax: 719.389.6959
 

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: