Re: Host Based IDS

["JiPi DiNi" <jipidini () gmail com>]

On Tue, Oct 21, 2008 at 7:40 AM,  <jeffrey.stebelton () citi com> wrote:
> Enterasys Dragon does have a HIDS product. It mainly supports IIS and
> Apache on Linux as far as log monitoring; if you run other platforms like
> Citrix, Apache on Windows, Lotus Domino or other web or ftp servers you'd
> have to roll your own policy and signatures.
I personally find that the Enterasys Dragon HIDS is not that great.
Mostly an LFM and you could accomplish this with another tool that
would be free ;)
No real shim or BOF protection. Maybe their new release is better then 6.x ...


X

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------