RE: Running Snort on Checkpoint NG AI/Secure Platform

["Eric Hines" <eric.hines () appliedwatch com>]

Also, comparing Smart Defense to Snort isn't what I would say is really
comparing apples and apples :) 
 
Best Regards,


Eric Hines, GCIA, CISSP
CEO, President, Chairman
Applied Watch Technologies, LLC
1134 N. Main St.
Algonquin, IL 60102
Tel: (877) 262-7593 x327
Fax: (877) 262-7593
Web: http://www.appliedwatch.com <http://www.appliedwatch.com/> 
  
 

  _____  

From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Ballard, Sean
(HHS/OS)
Sent: Wednesday, February 02, 2005 1:32 PM
To: 'Ruiyuan Jiang'; snort-users () lists sourceforge net
Subject: RE: [Snort-users] Running Snort on Checkpoint NG AI/Secure Platform


Well, there are a few reasons. Snort is much MUCH more flexible IMHO then SD
(SD is a great IPS though). Smart Defense also requires a software
subscription. What I am doing is measuring whether what I want to do is
first possible from a technical level, then of course a final decision will
be made as whether to use SD instead. At this stage I'm just trying to see
if it's been done by anyone before I setup my test environment.
 
 
-Sean
 
  _____  

From: Ruiyuan Jiang [mailto:Ruiyuan_Jiang () liz com] 
Sent: Wednesday, February 02, 2005 2:22 PM
To: snort-users () lists sourceforge net
Subject: RE: [Snort-users] Running Snort on Checkpoint NG AI/Secure Platform
 
Why you want to do that? Why don't you use SmartDefense from CheckPoint
which comes with the firewall software? 
 
 
Ryan
 
 
  _____  

From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Ballard, Sean
(HHS/OS)
Sent: Wednesday, February 02, 2005 2:12 PM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] Running Snort on Checkpoint NG AI/Secure Platform
Has anyone out there successfully setup snort to run on Checkpoint
Secureplatform? I am in the process of setting up a test box to see if I can
get this setup working. I am going to use vanilla Redhat snort RPM's for the
install. Has anyone got this up and working? I have googled newsgroups and
mail lists to no avail. Comments? Ideas?
 
-Sean