RE: For those of you that don't know....

[Rodney Thayer <rodney () canola-jones com>]

At 04:06 PM 12/13/2004 -0500, Maynor, David (ISS Atlanta) wrote:
> > Thats just stupid to claim that i am trying to deceive people on the 
> > list for my own agenda. I am not. 
>
> It was a joke because for the life of me I can't understand why you
> would recommend something that is trivial to evade.

OK, if it's so trivial to evade, please provide pointers to examples.

> > > You can't say with a straight face they were doing better than
> everybody
> > > else in the market

They send me more P-R spam than everyone else.  Other vendors do
send me spam or press releases, but they were the loudest for sure.
That's an unscientific sample, to be sure.  Other vendors do things too.
ISS tried to take me out golfing a couple of weeks ago, for example.
That struck me as silly, but I don't have data to claim they were
wrong.  In a world where Tippingpoint sends me a press release every
time some one room schoolhouse in west texas buys a box from them
I certainly would not say ISS behaved inappropriately by trying to
talk to me.

> > Yeah its probably true that they dont handle application level 
> > fragmentation but who else does without actually sitting on the host ? 

"It's not necessary"

that's what Marcus Ranham advises his clients.

I guess NFR doesn't do it right either ;-)

> It sounds like you are confusing the IPS space with behavior based or
> "anomaly based IPS." They are two different things.

I trust you meant to say "anomaly based IDS" (D not P)

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave