Re: RE: IDS (was: FW appliance comparison)

[Cat Okita <cat () reptiles org>]

On Tue, 24 Jan 2006, Marcus J. Ranum wrote:
> That's the main reason why I don't like IDSs. A default deny
> > > policy combined with "log everything" achieves just the same.
> >
> > *blink* You don't bog down your firewall to the point of being
> > unuseable doing that?!?
>
> If your firewall bogs down because of a little bit of logging it is
> a POS and should be used as a flower planter, not a security
> device.

Oh - I agree completely.  If my firewall bogs down because of a little
bit of logging, it should be pushing up daisies.

... but I'm not thinking of a 'little' bit of logging.  I'm thinking of
"look at everything that could -possibly- be of interest".

cheers!
==========================================================================
"A cat spends her life conflicted between a deep, passionate and profound
desire for fish and an equally deep, passionate and profound desire to
avoid getting wet.  This is the defining metaphor of my life right now."
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards