IDS mailing list archives

Re: HIPS Comparative ?


From: Javier Reyna Padilla <jreyna () onlinet com mx>
Date: Thu, 06 Dec 2007 08:16:27 -0600

I had had only expirience with ISS Server Sensor and ISS Proventia
Server & Desktop... altought Server Sensero is an IDS it has a wide
range of oportunities, it is flexible, and its funtionnality can make it
appears as a HIPS, Proventia Server is the replacement for server
sensor. It works as an hips, and includes firewall ( obviously),
antivirus, an a lot of cool things. There is a free download in ISS for
Proventia Server in StandAlone, maybe you would like to try it out.

¡Saludos!

________________

Javier Reyna 
CCSA CCSE WCSE NSA NSP
Consultor en Seguridad
jreyna () onlinet com mx
www.onlinet.com.mx



Robert Keller wrote:
Hi All,

I am currently in the process of testing multiple HIPS for usage in a
mixed environment (mainly Windows (Servers & Desktops) + various Linux
boxes from SUSE and Red Hat)

I came across a product from Primary Response
http://www.sanasecurity.com/products/smbEnterprise/pr/index.php

I wonder if any of you has an experience with their products.

I appreciate also if you can send me where to find comparative guide of
Enterprise HIPS available today in the market.

Thanks,
Robert

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------


Current thread: