Snort and Cisco Pix

From: Jeremy (prrthd@myrealbox.com)
Date: 10/22/01


Subject: Snort and Cisco Pix
From: Jeremy <prrthd@myrealbox.com>
To: focus-ids@securityfocus.com, 
Date: Mon, 22 Oct 2001 21:43:15 +0000
Message-ID: <1003786995.43e2eff9prrthd@myrealbox.com>

Hello all,

  We were looking at the new Cisco IDS card that goes into their 6500's and our cisco guy said that when it matches a signature it could update the pix access lists to block traffic from that ip. We are currently running several snort boxes and I was wondering if there was anything like that for snort. Also, is there anything in snort now other than flex-resp that takes an active role in stopping packets that match a certain signature?
  Sure would like to save our company $40K from having to buy 2 of those cisco ids cards.

Thanks,
   Jeremy


Quantcast