Re: IDS evaluation

From: Johannes Ullrich (jullrich@euclidian.com)
Date: 08/22/02 

Date: Thu, 22 Aug 2002 12:25:41 -0400
From: "Johannes Ullrich" <jullrich@euclidian.com>
To: "Saad Kadhi" <bsdguy@docisland.org>

> I'm a Snort fan but deploying 12 of them with central management needs
> good expertise and multi-tool gluying skills.

same here (snort fan). But I guess if you are comparing it to
commercial products like Dragon, you should consider the
commercial/supported version of snort from Sourcefire. I haven't
had a chance to use it yet. But I understand they offer a central
management console and a 'plug and play' appliance (hardware with
pre-installed snort sensor).