Re: Re: nfr and realsecure vs blackice -reply

[Mark.Teicher () predictive com]

OK,

This might simplify things for people just beginning to understand the 
Intrusion Detection System segment

This table might help categorize what products fall into what category:

Table 1 - True Intrusion Detection Systems

Vendor
Product
Type
NFR
NFR Intrusion Detection Appliance 4.01
Appliance (1-1 or many to 1) --> Console
ISS
RealSecure 3.2.1999.255
Agent, Engine (1-1 or many to 1) --> NT Console (only)
Axent
NetProwler 3.0.1 GA  /ITA 3.01GA
Agent, Console NetProwler 3.0 (1-1) (vulnerability data) to ITA 


Vendor
Product
Type
Price
NFR
Back Officer Friendly
Application that monitors for typical services and has the ability to send 
Fake Replies, refer to www.nfr.net/bof for a more detailed description
$29.95
NetworkICE
BlackICE Defender
More defined application that acts very similiar to BOF but has more bells 
and whistles.  No Agent/Engine --> Console capabilities as of yet, but 
according to their marketing folks, will be released shortly
$39.95 - 32-bit version a bit buggy still


If you look at the various trade rags, they have more a more detailed 
description of the various products mentioned.  There are also more 
products that fit into the two categories but these are the reigning 
contenders or the most mentioned in the press.  I did not include Dragon 
since the new version has not been publically released and the reporting 
menu is very rudimentary at best and cannot hold a candle to NFR or ISS 
products..

/m