IDS mailing list archives
RE: IDS ISS
From: "Palmer, Paul (ISSAtlanta)" <PPalmer () iss net>
Date: Wed, 18 May 2005 15:02:04 -0400
Anatole, For network IPS/IDS only you could use the G400 product. It has an HTTPS-based LMI (local management interface) where you can configure the device as well as view the events. However, if you are interested in a multi-function device (IDS/IPS, firewall, VPN, A/V, content filtering, etc.) the M10 might be a good choice. The M10 also has an HTTPS-based LMI. Both devices also allow you to forward event details over e-mail, trigger SNMP traps, etc. Without more details, it is hard to know exactly what to recommend. If you are doing this in preparation for a purchase decision, I recommend you contact ISS sales. They can provide better support than you will be able to get over a mailing list. If you are planning on publishing your results, you might try to contact the ISS marketing group for support for similar reasons. (I work for ISS) Paul -----Original Message----- From: Berteau Anatole [mailto:anatole.berteau () turbomeca fr] Sent: Tuesday, May 17, 2005 12:03 PM To: focus-ids () securityfocus com Subject: IDS ISS Hello, I'm testing IDS solution. After Snort, i'm beginning to work with ISS. What's the minimum architecture to use ISS? Is it possible to use only a network sensor? If this solution is available, what's the solution to consult alerts? Thanks Anatole ------------------------------------------------------------------------ -- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------ -- -------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
Current thread:
- IDS ISS Berteau Anatole (May 18)
- Re: IDS ISS Jonathan Glass (May 19)
- RE: IDS ISS Siddharth Phadnis (May 19)
- <Possible follow-ups>
- RE: IDS ISS Palmer, Paul (ISSAtlanta) (May 19)
- Re: IDS ISS David DiGennaro (May 19)
- RE: IDS ISS THolman (May 19)
- Re: IDS ISS Joel Esler (May 24)
- RE: IDS ISS PPowenski (May 28)