IDS mailing list archives
Re: ISS Siteprotector as syslog server?
From: "Andres Riancho" <andresit () fibertel com ar>
Date: Sat, 20 Nov 2004 14:44:14 -0300
Ronald , As far as i know the only way to do that is to buy a Third Party Module license from ISS . The TPM opens up a syslog server , parses the info that is fed to it and then uploads all the data to the SP Database. There are only two parsers , CiscoPix and Checkpoint FW. Cheers , Andres Riancho ----- Original Message ----- From: "Bowes, Ronald (EST)" <RBowes () gov mb ca> To: <focus-ids () securityfocus com> Sent: Thursday, November 18, 2004 12:08 PM Subject: ISS Siteprotector as syslog server?
We're trying to get several different systems (ips and ids) to work together, as we're evaluating ips products made by various vendors. The ips appliances we're using can export their data to a syslog server,
and
it would be nice if we could import the syslog data into ISS
SiteProtector.
Has anybody tried to do that before? Thanks, Ron Bowes -------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
-------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
Current thread:
- ISS Siteprotector as syslog server? Bowes, Ronald (EST) (Nov 19)
- Re: ISS Siteprotector as syslog server? Andres Riancho (Nov 22)
- RE: ISS Siteprotector as syslog server? Rob Shein (Nov 22)
- RE: ISS Siteprotector as syslog server? Eric Hines (Nov 22)
- Re: ISS Siteprotector as syslog server? David Maynor (Nov 24)
- RE: ISS Siteprotector as syslog server? Eric Hines (Nov 22)
- RE: ISS Siteprotector as syslog server? Leandro Reox (Nov 22)
- <Possible follow-ups>
- RE: ISS Siteprotector as syslog server? PPowenski (Nov 23)
- RE: ISS Siteprotector as syslog server? Brito, Nelson (ISS Brazil) (Nov 29)