RE: IDS ISS

[Siddharth Phadnis <sphadnis () clear-trail com>]

Hi,
 You can deploy ISS software on one single box. You will require to have ISS RealSecure console (management console) 
installed with ISS sensor installed on the same machine. The one things that bugs me about installing ISS is the usage 
of MSDE or MS-SQL though. Why cant ISS port their RealSecure  on open OSs is beyond me.
 The Alers can be viewed on RealSecure console or depends on how u configure them.
 
 HTH,
 Siddharth
 
----- Original Message -----
From: Berteau Anatole 
Sent: Wed May 18 2005 22:06:25 GMT+0530 (India Standard Time)
To: focus-ids () securityfocus com
Subject: IDS ISS



Hello,

I'm testing IDS solution. After Snort, i'm beginning to work with ISS.

What's the minimum architecture to use ISS? Is it possible to use only a network sensor? If this solution is available, 
what's the solution to consult alerts?

Thanks

Anatole

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------




--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------