Re: Winxp, blackice and ie
From: Ken.Williams@ey.comDate: 12/20/01
- Previous message: jim terry: "RE: external database for Cisco IDS"
- Maybe in reply to: Philip Wagenaar: "Winxp, blackice and ie"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: focus-ids@securityfocus.com From: Ken.Williams@ey.com Date: Thu, 20 Dec 2001 11:32:29 -0600
v2.9.can is the most recent version of BID.
on XP Pro (5.1.2600) and HE, i also noticed that the bid service
occasionally died without warning, and also that it would sometimes
take forever to start. the taskbar icon also sometimes incorrectly
showed that the service was not running, when it really was. i
solved the problem permanently by replacing BID with a Cisco PIX 501
and a PII running snort and ipf. A cheaper solution would be to use
a Linksys router/firewall, like the BEFSR41, which can be found for
$80 after vendor rebate. Get LinkLogger to compensate for Linksys'
weak logging functionality, and to complete the package. Even with
a PIX, snort, and ipf, BID does provide a decent host-based firewall/ids
solution - certainly better than ZoneAlarm on XP. Tiny Firewall has
some great features and should be considered too - works fine on XP.
Regards,
ken
Ken Williams ; Technical Lead ; ken.williams@ey.com
eSecurityOnline - an eSecurity Venture of Ernst & Young
ken.williams@ey.com ; www.esecurityonline.com ; 1-877-eSecurity
Sébastien Vaast
<sebastien.vaast@cha To: "Philip Wagenaar"
<PB.Wagenaar@Chello.NL>, <focus-ids@securityfocus.com>
pitre.com> cc:
Subject: Re: Winxp,
blackice and ie
12/20/2001 02:42 AM
Last version is 2.9 which should work with Windows XP. At least, that's
what's mentionned on http://www.networkice.com/downloads/index.html and it
works on my WinXP Pro quite flawlessly (except from time to time the
service
shuts down, like it did before with Windows 2000. Don't have a clue about
that one).
Sébastien Vaast
______________________________________________________________________
The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message
is not the intended recipient, or an employee or agent responsible for
delivering this message to the intended recipient, you are hereby notified
that any dissemination, distribution or copying of this communication is
strictly prohibited. If you have received this communication in error,
please notify us immediately by replying to the message and deleting it
from your computer. Thank you. Ernst & Young LLP
- Previous message: jim terry: "RE: external database for Cisco IDS"
- Maybe in reply to: Philip Wagenaar: "Winxp, blackice and ie"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
