RE: IDS recommendations

From: Chris Eidem (jceidem@dexma.com)
Date: 12/04/01 

Date: Tue, 4 Dec 2001 08:58:16 -0600
From: "Chris Eidem" <jceidem@dexma.com>
To: <Nate.Duzenberry@mortgage.wellsFargo.COM>

You may want to check out www.sourcefire.com, Marty's for-profit snort
appliance. You may be able to get all the CYA stuff your business
requires from them...

> -----Original Message-----
> From: Nate.Duzenberry@mortgage.wellsFargo.COM
> [mailto:Nate.Duzenberry@mortgage.wellsFargo.COM]
> Sent: Monday, December 03, 2001 2:51 PM
> To: Keith.McCammon@eadvancemed.com
> Cc: bugtraq@funky.seifried.org; focus-ids@securityfocus.com
> Subject: RE: IDS recommendations
>
>
> OOPS. I am now aware that they ported it.
>
> It still is not a good HID solution for our environment. I
> can't attach a
> service level agreement to an open source application that
> doesn't have
> escalation support. Not to mention that I can't put Beta
> software in a
> production server farm! We are using it for NID in a few
> select scenario's
> and have had problems with HP ITO integration.
>
> Sorry, those are simply the facts in a large environment.
>
> -----Original Message-----
> From: McCammon, Keith [mailto:Keith.McCammon@eadvancemed.com]
> Sent: Monday, December 03, 2001 2:43 PM
> To: Nate.Duzenberry@WellsFargo.COM; drsuse@lizard.drsuse.org;
> Nate.Duzenberry@WellsFargo.COM; aplato@anitian.com;
> focus-ids@securityfocus.com
> Subject: RE: IDS recommendations
>
>
> "Let's face the facts though and understand that Windows is still well
> rooted in many IT environments. Snort is not available on that
> platform"
>
> Ummm...
>
> http://www.snort.org/releases/Snort183Win32.exe
>
> http://www.silicondefense.com/software/snort_windows_installer
/index.htm

http://www.silicondefense.com/techsupport/downloads.htm