RE: ATM decoding

[<PPowenski () oag com>]

Are your desktops processing native cell based ATM traffic i.e. with an
ATM NIC?
Not many companies are making them any longer I beleive.
not many folks are doing that most use some type of encapsulation
to/from ethernet.
If your ATM switch is doing assembly / disassembly that ingress/egress
point would be the best point for your IDS sensor.

Otherwise keeping up with the cell assembly / disassembly could get
quite hairy for any IDS software even if it could perform this.



-----Original Message-----
From: Seek Knowledge [mailto:aseeker03 () yahoo com] 
Sent: 30 June 2005 05:08
To: focus-ids () securityfocus com
Subject: ATM decoding


Anyone know of good IDS/IPS products that can decode
ATM traffic? So far my list goes like this:

ISS SiteProtector does not support ATM
McAfee IntruShield does not support ATM
TippingPoint UnityOne does not support ATM

I am looking for software or hardware. I just need to
be able to implement intrusion detection (prevention
too if possible) into an ATM network.

Thanks
-aseeker03 (CISSP)

Send instant messages to your online friends
http://uk.messenger.yahoo.com 

------------------------------------------------------------------------
--
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708

to learn more.
------------------------------------------------------------------------
--
NOTICE: This e-mail is intended for the named recipient(s). It may contain privileged and/or confidential information. 
If you are not one of the intended recipients, please notify the sender immediately and destroy this e-mail and 
attachment(s): you must not copy, distribute, retain or take any action in reliance upon the email or attachment(s). 
While all reasonable efforts are made to safeguard inbound and outbound e-mails, OAG Worldwide Ltd and its affiliate 
companies cannot guarantee that attachments are virus-free or are compatible with your systems, and does not accept 
liability in respect of viruses or computer problems experienced. Thank you.


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------