RFI: Intrusion Detection Systems

From: Kim Graham (longtrip@rogers.com)
Date: Thu Nov 13 2003 - 07:37:38 GMT-3

• Next message: Ronald van Dommelen: "ATMSVC's back-2-back"
• Previous message: Stefano Lassi: "HSRP + Proxy ARP + Dialup (Problem)"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

My apologies to anyone that receives duplicates of this email stemming from it being cross posted.

I have been asked to investigate an Intrusion Detection/Prevention System. Could anyone that has knowledge of the following products give me the good, bad or the ugly concerning them. Reply to myself online or off line

If anyone would like a summary of the results please do not hesitate to ask.

NIDS:
Cisco Intrusion Detection Sensors Version 4.x
         4235, 4250
NAI Intrusion Prevention Sensors
         IntruShield 2600, 4000 (IntruVert)

HIPS:
Cisco Security Agent
Entercept

Management Systems:
Cisco VMS - VPN/Security Management System
NAI: ISM Security Management System.

Any thoughts would be appreciated.

Kim

• Next message: Ronald van Dommelen: "ATMSVC's back-2-back"
• Previous message: Stefano Lassi: "HSRP + Proxy ARP + Dialup (Problem)"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Fri Dec 12 2003 - 12:29:11 GMT-3