Educause Security Discussion mailing list archives
Re: SIM
From: John Bambenek <bambenek () CONTROL CSL UIUC EDU>
Date: Tue, 6 Dec 2005 20:11:01 -0600
Forth from the top in his list -----Original Message----- From: Douglas Brown [mailto:dugbrown () EMAIL UNC EDU] Sent: Tuesday, December 06, 2005 6:00 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] SIM we've had the exact opposite experience; excellent product, excellent support - and if I read Ryan's message correctly, he wasn't even asking about Tipping Point... ? -doug John Bambenek wrote:
I did a demo with Tipping Point. It went so bad I sent the demo back without ever getting the thing live on the network. Both times I got bad devices and their support took FOREVER to figure out what I already knew. I don't think I'm being harsh, but they did absolutely horrible, showed me they didn't care, and consequently I just dropped it and never considered them again. j ---------------------------------------------------------------------- -- *From:* Rose, Ryan [mailto:Ryan.Rose () UNCO EDU] *Sent:* Tuesday, December 06, 2005 5:39 PM *To:* SECURITY () LISTSERV EDUCAUSE EDU *Subject:* [SECURITY] SIM Hello, We are in the process of evaluating Security Information Management appliances and are hoping to get some feedback from those of you who are currently using a SIM product or are in the process of evaluating. Currently we have a variety of products that we would like to have the SIM correlate events for - ISS Symentac PIX Tipping Point Etc. We are looking at three products - Cisco MARS TriGeo Network Intelligence Any feedback would be greatly appreciated. Ryan Rose