Re: Snort and Cisco Pix

From: Hervé Debar (herve.debar@francetelecom.com)
Date: 10/24/01 

Message-ID: <3BD689AC.3CE4AA77@francetelecom.com>
Date: Wed, 24 Oct 2001 11:28:12 +0200
From: Hervé Debar <herve.debar@francetelecom.com>
To: "'focus-ids@securityfocus.com'" <focus-ids@securityfocus.com>
Subject: Re: Snort and Cisco Pix

Branden Han*** wrote:
>
> Greetings Jeremy,
>
> I thought I would weigh in on this issue as I've extensive experience with
> the Cat6500 IDS Module (IDSM).
>
> Firstly, if you're looking for a cost effective solution, then I would have
> to recommend using a 4200 Series standalone sensor if you're committed to a
> Cisco (NetRanger) solution. The Cat IDSM is quite pricey, as well as it
> occupies a useful slot in an expensive chassis. Additionally, if you
> actually play with the unit, you'll realize that this blade is actually an
> Intel PC running Windows NT 4. Though one does not have to interact with
> windows during the operation of the device, you should know this.
Are you sure about this ? The Cisco salesperson told us it was running
Linux, not NT.

Hervé 

-- 
Hervé Debar                <mailto:herve.debar@francetelecom.com>
Tel: +33 (0)2 31 75 92 61               GSM: +33 (0)6 74 09 09 66
France Télécom R&D                      Fax: +33 (0)2 31 75 93 13
42 rue des Coutures  (-/-)  BP 6243  (-/-)   F-14066 Caen Cedex 4

Quantcast