Snort IDS Frontends

["Crawford, Charles D" <ccrawf () KU EDU>]

Hello List,

I know this has been a hot item on many listservs lately but I am interested
to hear what other Institutions are using for front ends on Snort.

We have tried ACID, PureSecure, Applied Watch.  All have there pro's and
cons.

ACID would be great if it weren't so slow. (Free is appealling, but doesn't
seem scalable, we had over a 500,000 records in our database and it took
over 2 minutes a wack on the mouse to get anything back)

PureSecure looks good --- budgets/state/money/hmmm might be a tough one to
sell.

Applied Watch --- Not sure How i felt about it...Pretty expensive



Any feedback would be excellent.

thanks



Charles Crawford
IT Security Officer
University of Kansas
(785)864-0491
ccrawf () ku edu

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.