RE: amount of alarms generated by IDS

[Frank Knobbe <frank () knobbe us>]

On Tue, 2004-05-11 at 12:37, Rob Shein wrote:
> The reason why there are two separate terms..."inline IDS" and "IPS"...is
> because they are two separate things.

Dude! Don't get us started on *that* again :)

Imho, an inline IDS is a subset of those devices that some call
Intrusion Prevention Systems. It can be defined as a device that
inspects traffic like an intrusion detection system, and denies/blocks
or allows/passes traffic like a firewall. Inline IDS or gateway IDS.

But sure, it can prevent intrusions. ;)


Cheers,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part