Re: Re: OSSIM as IDS

[nospam () blahblahblaaah com]

Well, two years ago you needed some skills to make it work. Perhaps you were not available to use the server 
correlation engine, perhaps you didn't write your own correlation rules, and perhaps you didn't write some plugins for 
all of this. You can make your own IDS rules, more sophisticated than with snort.

The agent has a easy and powerfull plugin system. So it's not just a frontend of snort. It started with snort as the 
main plugin but it can collect events from a lot of devices and logs.

Give it a try.

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------