IDS mailing list archives

RE: Entercept HIDS Question


From: "Ralph H. Chapman" <Ralph.Chapman () aebs com>
Date: Fri, 12 Mar 2004 11:15:14 -0600


The problem with CSA and Windows 2003 is that Cisco Works, which is used
to manage all the agents, does not run on 2003, only 2000. Having an
agent on a 2003 box should not be problem.

I would love to see how Entercept and CSA compare to Symantec's stuff.
If I would ever get some spare time, that would be a great project.


-----Original Message-----
From: simonis () att net [mailto:simonis () att net] 
Sent: Monday, March 08, 2004 4:06 PM
To: focus-ids () securityfocus com
Subject: RE: Entercept HIDS Question

Same situation here. At the time of evaluation, we've contacted
Entercept only to give up after two months of silence.. Needless to
say, we went with Okena (now Cisco) and are very happy with it.
Just like Zach, I had completely unpatched Windows2000 box with
everything on it in the wild for over three month, protected by Okena


Does anyone know if the CSA runs on Windows2003, or if it will 
anytime soon?  Has anyone compared that product to Symantec ITA 3.6
or HIDS 4.1?

-Ds

------------------------------------------------------------------------
---
Free 30-day trial: firewall with virus/spam protection, URL filtering,
VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with
Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total
cost of
ownership.

Download your free trial at 
http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
------------------------------------------------------------------------
---



---------------------------------------------------------------------------
Test your IDS

Is your IDS deployed correctly?
Find out by easily testing it with real-world attacks from CORE IMPACT.

Visit:
www.coresecurity.com/promos/sf_eids1 to learn more.
---------------------------------------------------------------------------


Current thread: