Re: IDS ISS

[Jonathan Glass <jonathan.glass () gmail com>]

Berteau Anatole wrote:

> Hello,
>
> I'm testing IDS solution. After Snort, i'm beginning to work with ISS.
>
> What's the minimum architecture to use ISS? Is it possible to use only a network sensor? If this solution is available, 
> what's the solution to consult alerts?
>
> Thanks
>
> Anatole
>
> --------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from 
> CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
> to learn more.
> --------------------------------------------------------------------------
>
>
>  
I believe you'll have to deploy their Site Protector console product to 
be able to effectively manage their IDS solutions. 

From their IDS product page:
http://www.iss.net/products_services/enterprise_protection/proventia/a_series.php
Proventia intrusion detection appliances are centrally managed through 
the SiteProtector management system. Ongoing X-Press Update product 
enhancements ensure that Proventia intrusion detection appliances 
maintain a first to know/first to protect advantage against both known 
and unknown attacks.

http://www.iss.net/download/
Try downloading and testing the SiteProtector console.

Thanks

Jonathan

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------