Re: McAfee Intrushield

[Ron Gula <rgula () tenablesecurity com>]

At 02:59 PM 4/20/2005, Andy Cuff wrote:
> Hi List,
> I'm trying to add Intrushield to the list of IDS that I report the latest
> signature releases on,[ http://www.securitywizardry.com/radar.htm ] does
> anyone know where I can find this information without the need to hold a
> service contract with McAfee, If anyone from McAfee IPS is on the list could
> they please contact me off list
>
>    Regards
> Andy Cuff
> Chief Technology Officer
> Computer Network Defence Ltd
> http://SecurityWizardry.com
> Phone (+44) (0) 7968 608945

(off list)

Andy, to my knowledge, they don't have a public place to get this
stuff, or even with their services agreement. For Lightning, we grab
their signature names form their XML dump, right off their management
console.

Thanks for the shirt too!

Ron


--------------------------------------------------------------------------
Stop hurting your network!

The NeVO passive vulnerability sensor continuously finds vulnerabilities, 
applications and new hosts without the need for network scanning. 
It also finds compromised systems with application-based intrusion detection. 
Go to http://www.tenablesecurity.com/products/nevo.shtml to learn more.
--------------------------------------------------------------------------