Educause Security Discussion mailing list archives
Re: SIM
From: John Bambenek <bambenek () CONTROL CSL UIUC EDU>
Date: Tue, 6 Dec 2005 17:45:33 -0600
I did a demo with Tipping Point. It went so bad I sent the demo back without ever getting the thing live on the network. Both times I got bad devices and their support took FOREVER to figure out what I already knew. I don't think I'm being harsh, but they did absolutely horrible, showed me they didn't care, and consequently I just dropped it and never considered them again. j _____ From: Rose, Ryan [mailto:Ryan.Rose () UNCO EDU] Sent: Tuesday, December 06, 2005 5:39 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] SIM Hello, We are in the process of evaluating Security Information Management appliances and are hoping to get some feedback from those of you who are currently using a SIM product or are in the process of evaluating. Currently we have a variety of products that we would like to have the SIM correlate events for - ISS Symentac PIX Tipping Point Etc. We are looking at three products - Cisco MARS TriGeo Network Intelligence Any feedback would be greatly appreciated. Ryan Rose