Re: Intrusion Detection recommendations

[Richo Healey <richo () psych0tik net>]

On 13/02/15 17:45 +0000, Mel Beckman wrote:
> Unless you need regulatory-grade IDS, your best bet is a Unified Threat Management (UTM) appliance, essentially any 
> modern enterprise grade firewall such as a Cisco ASA, Fortigate, SonicWall, etc. These all have built-in IDS/IPS 
> options for a fee.
>
> -mel

Flip over these, or ideally watch the talk before deploying an ASA (or some
other black-box security appliance that tries to be All Things to All People)

https://ruxcon.org.au/assets/2014/slides/Breaking%20Bricks%20Ruxcon%202014.pdf

--
richo