RE: Gateway IDS

From: Milletary, Jason (MilletaJ@ctc.com)
Date: 06/25/02 

From: "Milletary, Jason" <MilletaJ@ctc.com>
To: "'Jochen Vogel'" <jvogel@it-sec.de>, focus-ids@securityfocus.com
Date: Tue, 25 Jun 2002 08:19:26 -0400

Jochen:

There's Hogwash, which is based on Snort:

http://hogwash.sourceforge.net/

and ISS RealSecure Guard

http://www.iss.net/products_services/enterprise_protection/rsnetwork/guard.p
hp

--Jason

> -----Original Message-----
> From: Jochen Vogel [mailto:jvogel@it-sec.de]
> Sent: Monday, June 24, 2002 4:14 AM
> To: focus-ids@securityfocus.com
> Subject: Gateway IDS
>
>
> hi,
>
> since last year i search a working gateway IDS solution.
> i search a solution that work like a firewall but additionally
> can block packets after an correlation with IDS signatures.
> the solution to send RST packets or reconfigure a firewall
> is nice but not really about latency or spoofing packets.
>
> greets
> Jochen
>