Re: FW/IPS log correlation software

["Ronald van der Westen" <rvdwesten () gmail com>]

You might wanna take a look at RSA's Envision...

On Sat, Apr 5, 2008 at 11:19 PM, Gleb Paharenko <gpaharenko () gmail com> wrote:
> Hi.
>
>  Netforensics SIM (http://www.netforensics.com/) can do this.
>  You can utilize OSSEC (www.ossec.net) for this purposes as well.
>  For cisco products perhaps it is better to use MARS
>  (http://www.cisco.com/en/US/netsol/ns698/networking_solutions_solution.html),
>  because their SIM is based on old Netforensics.
>
>  4 Apr 2008 13:55:40 -0000, mgk.mailing () googlemail com
>  <mgk.mailing () googlemail com>:
>
>
> >
>  >  http://www.splunk.com/
>  >
>  >
>  >  We have been looking at that for our own systems.
>  >
>  >
>  >  mgk
>  >
>
>
>  --
>  Best regards.
>  Gleb Pakharenko.
>  http://gpaharenko.livejournal.com



-- 
Ronald van der Westen