RE: [Snort-devel] IDS vs IPS

[Robert Wagner <rwagner () eruces com>]

What is your definition of an IPS, or what do you want it to do?
 
Example:  I want snort to run on the public side of my network, when it sees
a scan or critical attack, it will notify my firewall (make, model) and add
a blocking rule for the attacker.

-----Original Message-----
From: Vkmobile () aol com [mailto:Vkmobile () aol com]
Sent: Wednesday, August 20, 2003 11:10 AM
To: snort-devel () lists sourceforge net
Cc: snort-users () lists sourceforge net
Subject: [Snort-devel] IDS vs IPS


So is Snort an IDS or an IPS (Intrusion Prevention) or both?
 
Also, how can an IDS be converted to an IPS? Can someone point me in the
right direction such as an FAQ or some website where i can read and learn?
 
Thank you.