Fw: Promiscuous vs Inline IDS

["Mustapha Huneyd" <mhbengal () yahoo com>]

I was wondering if there are tests conducted to show traffic (bottleneck)
patterns for both INLINE & Promiscuous IDS. Also are there tests that
highlight differences or similarities in capture patterns for both kinds of
IDS? Basically I want to know if an Inline IDS would create a bottleneck in
a Fast ethernet / GE network?.

For e.g. SNORT inline vs ISS Realsecure or Cisco IDS

Mustapha


-------------------------------------------------------------------------------
Can you respond to attacks based on attack type, severity, source IP,
destination IP, number of times attacked, or the time of day an attack
occurs? No? 
No wonder why you're swamped with false positives! 
Download a free 15-day trial of Border Guard and watch your false
positives disappear.

http://www.securityfocus.com/StillSecure-focus-ids2
-------------------------------------------------------------------------------