Re: NetIQ Security Manager: Is it a good product for IDS on windows?

[Mark Teicher <mht3 () earthlink net>]

For the native products it supports, it provides good coverage, for 
anything more custom than what one desires, brush off one's ability 
to customize or modify example scripts provided. Another item to 
watch out for, is pricing.

/m

At 06:27 AM 7/17/2005, securealvinlim () yahoo com sg wrote:
> Hello Guys,
>
> Sorry for being so specific about a product, but I'd like to know 
> people's opinons about this product for IDS functionality on the 
> Windows environment.
>
> So far everything I've seen about it indicates that it is more a log 
> collector on the agent side, rather than a security product.
>
> I'm interested to hear from anyone out there who has had experiences 
> with this product and if you have had success with picking up 
> malicious events on your network.  Also, if you did do some tests 
> with the product and decided to give it a miss I would love to know too.
>
> We are currently evaluating several ids products in our company and 
> I'm esp interested in feedback about this product
>
> Thanks,
> Alvin
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
> ------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------