Snort mailing list archives

RE: Snort is a "niche player"


From: "Bob Walder" <bwalder () spamcop net>
Date: Wed, 30 Jun 2004 10:05:09 +0200

Sorry... Got distracted after the first sentence so couldn't make it all
the way through for laughing, but....

"IDS vendors that have not introduced blocking capabilities by the end
of 2004 will not be viable providers beyond the end of 2005 (0.9
probability).

The intrusion detection industry (IDS) industry is struggling to justify
inordinate investments in complicated, expensive technology that does
little to protect the enterprise. Because IDS has reached the peak of
its usefulness as a stand-alone technology, and intrusion prevention
system technologies are offering significant challenges to IDSs, this
will be the final IDS Magic Quadrant that Gartner presents."

;o)

Anyone else agree with me that these two technologies (IDS and IPS - and
let's not get into another argument about *what* IPS is, let's just
accept the marketeers term for this particular thread, eh?) will
continue to live side by side for some time to come?

The good news is, at least we don't have to put up with another banal
IDS Magic Quadrant.... ;o)

Regards,

Bob Walder







-----Original Message-----
From: snort-users-admin () lists sourceforge net 
[mailto:snort-users-admin () lists sourceforge net] On Behalf 
Of Darren Webb
Sent: 30 June 2004 07:22
To: 'snort-users'
Subject: RE: [Snort-users] Snort is a "niche player"


Here is a link to the article. 
http://mediaproducts.gartner.com/reprints/networkassociates/1
20510.html

I would like to pose this question to the list (just a bit 
off topic).   In
your company do you, as the IDS admin/user, have complete 
control over what IDS systems you test and ultimately choose 
to bring in house?  I bring this up because my group (we are 
responsible for IDS) may lose the product ownership of the 
IDS systems and be forced to deal with an in-house 
engineering group for upgrades and new equipment/products.  
This group could potentially leverage reports such as this 
to bring in IDS vendors (see the Leader section in the 
"Magic Quadrant")that fit the Gartner definition of a good 
IDS (regardless of how they perform in the real world).

Thanks.

Darren

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf 
Of Yaakov Yehudi
Sent: Tuesday, June 29, 2004 10:49 PM
To: 'Guillaume Arcas'
Cc: 'snort-users'
Subject: RE: [Snort-users] Snort is a "niche player"


 Yes, those would be the same ones!  It's not the first time 
that I have felt I needed to take one of their reports with 
a "pinch of salt" (sorry, make that a cup!).

Regards, Ya'akov

-----Original Message-----
From: Guillaume Arcas [mailto:guillaume.arcas () free fr] 
Sent: Tuesday, June 29, 2004 20:05
To: Yaakov Yehudi
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort is a "niche player"

Yaakov Yehudi a dit :
I see that Gartner Research are dismissing Snort as a 
"Niche Player" 
in their recent report "Magic Quadrant for Intrusion Detection 
Systems, 2H03". Has anybody else read this report?, and if 
so, what is 
your opinion?

Gartner... Gartner...
These same guys who said IDS were dead last year ? :-)

Guillaume Arcas

-------------------------------------------------------------
-----------
Là-bas, vers le sud, la plaine s'ouvre, infinie, 
attirante... Puis le désert, sa vie libre et errante et son 
bienfaisant silence. Isabelle Eberhardt - Au pays des sables.



-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & 
Training. Attend Black Hat Briefings & Training, Las Vegas 
July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com 
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe: 
https://lists.sourceforge.net/lists/listinfo/sno>> rt-users


Snort-users list archive: 
http://www.geocrawler.com/redir-sf.php3?list=ort-users



-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & 
Training. Attend Black Hat Briefings & Training, Las Vegas 
July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com 
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe: 
https://lists.sourceforge.net/lists/listinfo/sno>> rt-users


Snort-users list archive: 
http://www.geocrawler.com/redir-sf.php3?list=ort-users





-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: