Re: Important Comments re: INtrusion Detection

[Jonathan Care <jonc () netcetera co uk>]

> Tom,
[snip]
> is any less effective in identifying network anomalies than other
> technology. In fact to make your point you left out the point that the
> firewall/proxy server can only detect anomalies that travel through it
> rather than those that are on the network. In either case the quality of
     ^^^^^^^^^^^^^^^^^^^^^^^^^

Erm, why is this true? Presumably the firewall (or the final gateway in a 
firewall complex) has a connection to "the network" (unless it is Perfect), 
and hence, can sniff it.

[snip]

> Kurt
[snip]

More for information than anything else.

jhc