IDS mailing list archives
Re: IDS ISS
From: "David DiGennaro" <DDiGennaro () BostonFinancial com>
Date: Thu, 19 May 2005 06:51:27 -0400
I implemented just 1 network sensor for ISS Real Secure at a major pediatric facility due to budgetary constraints. While it can be done I would not recommend it especially if you have a large complex network. At the very least you should deploy some HIDS with it for some added protection. I was required to deploy a Snort server on the research side of the network because it was "free". We implemented a centralized log server and parsed the logs since we were using a combination of products. We then had the alerts sent out to a Blackberry unit that was carried by the on-call person. D.DiGennaro -------------------------------------------------------------------------------------------------------------------- IMPORTANT NOTICE. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. If you are not the intended recipient, or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that you received this communication in error. Any review, dissemination, distribution or copying of this communication is strictly prohibited. If you receive this communication in error please send a return e-mail, and then delete this message, together with any attachments. Thank you. -------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
Current thread:
- IDS ISS Berteau Anatole (May 18)
- Re: IDS ISS Jonathan Glass (May 19)
- RE: IDS ISS Siddharth Phadnis (May 19)
- <Possible follow-ups>
- RE: IDS ISS Palmer, Paul (ISSAtlanta) (May 19)
- Re: IDS ISS David DiGennaro (May 19)
- RE: IDS ISS THolman (May 19)
- Re: IDS ISS Joel Esler (May 24)
- RE: IDS ISS PPowenski (May 28)