Re: snortsam/snort-inline/guardian

[Frank Knobbe <frank () knobbe us>]

On Mon, 2005-03-28 at 09:46 -0500, Jeff Heckart wrote:
> I am trying to decide on snortsam/snort-inline/guardian for real time
> blocking.
> What should I try here?


Seeing how these three are all different, why don't you try them all?

Snort-inline: Blocks traffic inline like an IPS.

Guardian: A script running on Snort sensor that reactively blocks on a
couple firewalls.

Snortsam: A distributed version of Guardian where Snort Sensors
reactively block on a variety of firewalls.

You probably want to check them all out and render your own opinion
about these.

Cheers,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part