Educause Security Discussion mailing list archives

Re: SIM


From: John Bambenek <bambenek () CONTROL CSL UIUC EDU>
Date: Tue, 6 Dec 2005 17:45:33 -0600

I did a demo with Tipping Point.  It went so bad I sent the demo back
without ever getting the thing live on the network.  Both times I got bad
devices and their support took FOREVER to figure out what I already knew.

I don't think I'm being harsh, but they did absolutely horrible, showed me
they didn't care, and consequently I just dropped it and never considered
them again.

j

  _____

From: Rose, Ryan [mailto:Ryan.Rose () UNCO EDU]
Sent: Tuesday, December 06, 2005 5:39 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] SIM



Hello,



We are in the process of evaluating Security Information Management
appliances and are hoping to get some feedback from those of you who are
currently using a SIM product or are in the process of evaluating.
Currently we have a variety of products that we would like to have the SIM
correlate events for -



ISS

Symentac

PIX

Tipping Point

Etc.



We are looking at three products -



Cisco MARS

TriGeo

Network Intelligence



Any feedback would be greatly appreciated.



Ryan Rose


Current thread: