Educause Security Discussion mailing list archives
Re:
From: "Penn, Blake" <pennb () UWW EDU>
Date: Thu, 20 Jul 2006 09:16:13 -0500
We use MARS and it's not really an IPS - it's more of an EM/SEM. That being said, we plan to log all of our snort, StealthWatch and Cisco ASA and FWSM alerts to the device which will hopefully give us a more comprehensive view of intrusion attempts (and all other security events) than an IPS itself. We found MARS to be very useful in our pilot and expect it will do the same in early production. __ Blake -----Original Message----- From: John Kaftan [mailto:jkaftan () HOTMAIL COM] Sent: Thursday, July 20, 2006 8:30 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] We are looking into Intrusion Prevention Systems. We have looked at Tipping-Point are about to look at Cisco MARS. Does anyone have any experiences that they care to share? John Kaftan _________________________________________________________________ Is your PC infected? Get a FREE online computer virus scan from McAfeeR Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
Attachment:
smime.p7s
Description:
Current thread:
- Re: Penn, Blake (Jul 20)