Educause Security Discussion mailing list archives
Re: Network flow log consolidation
From: Wes Young <wcyoung () BUFFALO EDU>
Date: Tue, 25 Apr 2006 16:41:41 -0400
On Tue, 2006-04-25 at 15:00 -0500, Justin Dover wrote:
Cisco MARS is VERY nice. Especially if you have an entire Cisco infrastructure. I hope to have one someday. I have seen it in action.
It's ok... like I said, baseline correlation and trends. If you put it side by side with arcsight, doesn't even come close. If they put some cisco money into the product, maybe in 2-3 years it will be a good competitor....maybe. -- Wes Young Network Security Analyst University at Buffalo ----------------------------------------------- | My Security Blog: | http://tinyurl.com/9av4k | | My RSS: | http://tinyurl.com/ceopv | | My Life: | http://tinyurl.com/l18g | | CPAN: | http://tinyurl.com/mujm5 | -----------------------------------------------
Current thread:
- Network flow log consolidation Logan Browne (Apr 25)
- <Possible follow-ups>
- Re: Network flow log consolidation Wes Young (Apr 25)
- Re: Network flow log consolidation Justin Dover (Apr 25)
- Re: Network flow log consolidation Jenkins, Matthew (Apr 25)
- Re: Network flow log consolidation Justin Dover (Apr 25)
- Re: Network flow log consolidation Graham Toal (Apr 25)
- Re: Network flow log consolidation Jenkins, Matthew (Apr 25)
- Re: Network flow log consolidation Wes Young (Apr 25)
- Re: Network flow log consolidation John Rasmussen (Apr 25)
- Re: Network flow log consolidation Steve Bernard (Apr 25)
- Re: Network flow log consolidation Valdis Kletnieks (Apr 25)
- Network flow log consolidation Kim Cary (Apr 26)
- Re: Network flow log consolidation Ensz, Sean A. (Apr 27)
- Re: Network flow log consolidation David Grisham (Apr 27)
- Re: Network flow log consolidation Tristan RHODES (May 01)