Snort mailing list archives
RE: [Snort-devel] IDS vs IPS
From: Robert Wagner <rwagner () eruces com>
Date: Thu, 21 Aug 2003 08:11:34 -0500
What is your definition of an IPS, or what do you want it to do? Example: I want snort to run on the public side of my network, when it sees a scan or critical attack, it will notify my firewall (make, model) and add a blocking rule for the attacker. -----Original Message----- From: Vkmobile () aol com [mailto:Vkmobile () aol com] Sent: Wednesday, August 20, 2003 11:10 AM To: snort-devel () lists sourceforge net Cc: snort-users () lists sourceforge net Subject: [Snort-devel] IDS vs IPS So is Snort an IDS or an IPS (Intrusion Prevention) or both? Also, how can an IDS be converted to an IPS? Can someone point me in the right direction such as an FAQ or some website where i can read and learn? Thank you.
Current thread:
- Re: Re: [Snort-devel] IDS vs IPS Mark Teicher (Aug 22)
- <Possible follow-ups>
- RE: [Snort-devel] IDS vs IPS Robert Wagner (Aug 22)
- RE: RE: [Snort-devel] IDS vs IPS Tom Van Overbeke (Aug 22)
- RE: Re: [Snort-devel] IDS vs IPS Bob Walder (Aug 22)
- RE: Re: [Snort-devel] IDS vs IPS Frank Knobbe (Aug 22)
- Re: Re: [Snort-devel] IDS vs IPS Jason (Aug 27)
- Re: Re: [Snort-devel] IDS vs IPS Stevo (Aug 27)
- Re: Re: [Snort-devel] IDS vs IPS Frank Knobbe (Aug 27)
- RE: Re: [Snort-devel] IDS vs IPS Gordon Cunningham (Aug 27)
- RE: Re: [Snort-devel] IDS vs IPS Frank Knobbe (Aug 27)
- RE: Re: [Snort-devel] IDS vs IPS twig les (Aug 27)
- RE: Re: [Snort-devel] IDS vs IPS Frank Knobbe (Aug 27)