RE: Best IDS ?

["Richard Bennison" <richard_bennison () hotmail com>]

Juan,

I would recommend ISS PrOventia due to the 7-layer protocol decode engine 
incorporated from NetworkICE. This can also work in IDS or IPS mode as well.

If you want a hoenypot approach I would suggest Forescout.

For IDS comparisons check out NSS.

Thanks Richard
Day Zero Securities


> From: Juan B <juanbabi () yahoo com>
> To: security basics <security-basics () securityfocus com>
> Subject: Best IDS ?
> Date: Wed, 7 Dec 2005 02:34:34 -0800 (PST)
>
> Hi,
>
> I need to check which ids to implement in the
> corporate.
>
> I think the best is Dragon from entrasys. ( I dont
> want to install the open source snort cause the
> managnet overhead is very high).
>
> do you agree Dragon is the best choise? if not why?
>
> where can I find a comperison article related to
> IDS's?
>
>
> also which IDS has more signitures ( and identifies
> more attacks?)
>
> Thanks very much !
>
> Juan
>
>
>
> __________________________________________
> Yahoo! DSL – Something to write home about.
> Just $16.99/mo. or less.
> dsl.yahoo.com