Security Basics mailing list archives

Re: Cisco vs. Snort


From: Jorge Claudio <jcs.lists () dgt pt>
Date: Thu, 04 Sep 2003 18:31:33 +0100

Hi,
Take a look in http://www.networkcomputing.com/1217/1217f2.html

Jorge

Nicholas Diotte wrote:

Good day,


Recently I've been asked to impliment an IDS system within our corporate network. I've been given a more then reasonable budget, so I'm not looking for a cheap/freebie solution. What if any are the advantages of
going Cisco vs. building a Snort system.


What I'm thinking is Snort would be much more of a headake as you need to
write/obtain rules, whereas Cisco that is not the case.


Has anyone had a chance to examin the two devices, and any pointers before I proceed with such an order? Most of our products on our network are
Cisco based, including all FW, routers, and soon switches.


Reason why I'm asking is that I've been asked to do a presentation for our Board of Directors, and as you can see the person in charge before me,
implimented nothing but Cisco products.


Thanks,

Nick

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world's premier technical IT security event. Modeled after the famous Black Hat event in Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors. Symantec is the Diamond sponsor. Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------



---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world's premier technical IT security event. Modeled after the famous Black Hat event in Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors. Symantec is the Diamond sponsor. Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------


Current thread: