Snort and Cisco Pix
From: Jeremy (prrthd@myrealbox.com)Date: 10/22/01
- Previous message: Kohlenberg, Toby: "RE: Realsecure"
- Next in thread: Wiese, Sean P.: "RE: Snort and Cisco Pix"
- Reply: Wiese, Sean P.: "RE: Snort and Cisco Pix"
- Reply: Kurt Seifried: "Re: Snort and Cisco Pix"
- Reply: Branden Han***: "RE: Snort and Cisco Pix"
- Reply: Frank Knobbe: "RE: Snort and Cisco Pix"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Subject: Snort and Cisco Pix From: Jeremy <prrthd@myrealbox.com> To: focus-ids@securityfocus.com, Date: Mon, 22 Oct 2001 21:43:15 +0000 Message-ID: <1003786995.43e2eff9prrthd@myrealbox.com>
Hello all,
We were looking at the new Cisco IDS card that goes into their 6500's and our cisco guy said that when it matches a signature it could update the pix access lists to block traffic from that ip. We are currently running several snort boxes and I was wondering if there was anything like that for snort. Also, is there anything in snort now other than flex-resp that takes an active role in stopping packets that match a certain signature?
Sure would like to save our company $40K from having to buy 2 of those cisco ids cards.
Thanks,
Jeremy
- Previous message: Kohlenberg, Toby: "RE: Realsecure"
- Next in thread: Wiese, Sean P.: "RE: Snort and Cisco Pix"
- Reply: Wiese, Sean P.: "RE: Snort and Cisco Pix"
- Reply: Kurt Seifried: "Re: Snort and Cisco Pix"
- Reply: Branden Han***: "RE: Snort and Cisco Pix"
- Reply: Frank Knobbe: "RE: Snort and Cisco Pix"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]