RE: firewalls and the incoming traffic problem

[Bill Stout <stoutb () pios com>]

Thinking more about the topic...  It would be nice to dynamically control
rules on a TIS/V-One firewall from a NFR IDS system.  I don't know what you
can wisely respond to, since it would make an attractive Denial of Service
target.

If you could do this without being a DOS target, it would also be nice if
there were a standard 'API' to the IDS system, which firewall-specific 'IDS
response' programs could link to.  Sorta like the CVP spec.

Bill Stout