IDS: Net Ranger vs. RealSecure vs. NFR

[SiOL CERT <cert () siol net>]

Hi.

I have two intrusion detection systems on a trial run, but have to chose the 
big winner. Both of them have been recommended as the cream of the crop and 
'best money can buy', but from the wrong persons.

One of them is Cisco's Net Ranger Director, which uses HP OpenView as a GUI 
(not prefered) and other one is ISS' Real Secure, which is a bit of a pain 
because I'd need to set a machine on each segment of the network I want to 
monitor.

The third IDS is my personal favorite NFR's Network Flight Recorder (ever 
since I read the white paper), but I need more informations about all of the 
mentioned IDS systems (especially cons, pros are more or less known).

The network in question is an ISP's public part of the system, which means I 
need some detection system than can swallow more than 70Mbit traffic on the 
fly.

Thanks in advance,

Saso