RE: ISS RealSecure/SiteProtector or another IDS/firewall client?

["Jack Whitsitt (jofny)" <seclists () violating us>]

I have to say...

Right now Im sitting around an ISS Site Protector console with 2 other analysts and, for the
life of us, we cannot get it to give us the information we need - much less quickly or easily.
We're all fairly experienced across a number of IDS platforms.  Whatever the engine does (or
other features), if you can't actually access the information you need in the format you need
it...those features are useless. With so many better products available (Intrushield, Dragon,
Snort/Sourcefire), I couldn't recommend ISS to anyone.

But thats just my experience.


-jofny
> -----Original Message-----
> From: Benjamin B. Williams [mailto:benw () gwu edu]
> Sent: Tuesday, November 25, 2003 9:23 AM
> To: focus-ids () securityfocus com; firewalls () securityfocus com
> Subject: ISS RealSecure/SiteProtector or another IDS/firewall client?
>
>
> Hey all –
>
> Has anyone had experience with ISS products, particularly their
> RealSecure line?
>
> We are planning for the upgrade (several years late) to Windows XP in our computer labs, and
> need a client-based firewall/IDS that can be centrally managed and has a decent logging
> system.  RealSecure looks like a good choice for us, but I thought I'd ask if anyone's had
> experience or could recommend an (or several) alternates?
>
> Thanks,
>
> Benjamin B. Williams
> Senior Programmer/Analyst
> Computer Lab Support Services
> The Center for Academic Technologies
> The George Washington University
>
> (202) 412-4697 (m)
> (202) 994-7611 (p)
> (202) 994-3600 (f)
>
> "Una giornata senza riso è una giornata sprecata"
>
>
>
>
> ------------------------------------------------------------------------ ---
> ------------------------------------------------------------------------ ---
>
>
> ---------------------------------------------------------------------------
> ---------------------------------------------------------------------------




---------------------------------------------------------------------------
---------------------------------------------------------------------------