Re: [fw-wiz] Re: IPS

From: Gary Flynn (flynngn_at_jmu.edu)
Date: 02/27/04

  • Next message: Christopher Lee: "RE: IPS (was: [fw-wiz] Sources for Extranet Designs?)" 
    To: firewall-wizards@honor.icsalabs.com
Date: Thu, 26 Feb 2004 21:12:31 -0500

    David Thiel wrote:

    > On Thu, Feb 26, 2004 at 06:45:53PM -0500, Gary Flynn wrote:
    >
    >>I got sick of watching Snort reports tell me about things that
    >>could have been easily been blocked with an inline device.
    >
    >
    > Then why not use Snort inline?

    Thought about it. It wasn't available when I first started
    looking and nobody could point me to someone using Hogwash
    inline on a production network. You know anyone that has
    Snort Inline in place on a production 45 Mbps Internet
    link?

    Also, the commercial products have more finished reporting/
    administration interfaces. 

    -- 
Gary Flynn
Security Engineer - Technical Services
James Madison University
_______________________________________________
firewall-wizards mailing list
firewall-wizards@honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
  • Next message: Christopher Lee: "RE: IPS (was: [fw-wiz] Sources for Extranet Designs?)"