Educause Security Discussion mailing list archives

Re: Cisco Security Agent and other HIPS


From: Dave Koontz <dkoontz () MBC EDU>
Date: Fri, 19 Jan 2007 15:44:15 -0500

We chose ISS because they had an integrated IPS appliance as well as their
HIPS software which are all centrally deployed and managed.  It was the
deciding factor for us between IPS vendors like SourceFire and Tipping
Point.

----
Dave Koontz
Mary Baldwin College
Staunton, VA 24401


-----Original Message-----
From: Jason Richardson [mailto:JasonR () GWM SC EDU]
Sent: Friday, January 19, 2007 3:30 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Cisco Security Agent and other HIPS

Hi Gary, we're evaluating HIPS products for the same purpose but CSA didn't
make our list.  These three did:

Internet Security System's Proventia Server -
http://www.iss.net/products/index.html
McAfee -
http://www.mcafee.com/us/enterprise/products/host_intrusion_prevention/index
.html
and
Third Brigade - http://www.thirdbrigade.com.

Of the three, we're looking the hardest at Third Brigade so far.  I'll be
interested to here of your experience with CSA if you decide to demo or
purchase it.

Jason Richardson
Information Security Manager
University of South Carolina
University Technology Services
jasrich () sc edu
803-777-0392


flynngn () JMU EDU 01/11 3:30 PM >>>
Anyone be willing to comment on experiences with Cisco Security
Agent or other Host Intrusion Prevention software?

I'd like to put it on things like domain controllers, authentication
servers, management servers, and high value, internet facing servers.

Of course, reliability is a significant concern with those
applications.


--
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security

Current thread: