RE: Sourcefire IDS?

From: Harper, Patrick (patrick.harper_at_phns.com)
Date: 04/12/04

  • Next message: hoop: "Re: History of intrusion detection" 
    To: "Kip Sr." <kipsr1@yahoo.com>, <focus-ids@securityfocus.com>
Date: Mon, 12 Apr 2004 14:27:03 -0500

     I have used them before and they are really nice. Easy thresholding,
    easy rule management, the only thing I did not care too much for were
    the reports. The support was always fast to respond to issues. Of all
    the IDS's I have used (I have used most of them) I like the snort
    solutions best and for an enterprise Sourcefire is really nice.

    -----Original Message-----
    From: Kip Sr. [mailto:kipsr1@yahoo.com]
    Sent: Friday, April 09, 2004 10:59 AM
    To: focus-ids@securityfocus.com
    Subject: Sourcefire IDS?

    Hi there-

    I am currently evaluating SourceFire IDS.
    Does anyone have any good/bad experiences running their IDS solution?

    Any feedback about using the product, managing false positives,
    SourceFire Support, etc would be greatly appreciated.

    Thanks!!

    Kip

    Disclaimer:
    This electronic message, including any attachments, is confidential and intended solely for use of the intended recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have received this message in error, please delete it and notify the sender immediately.

    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------

  • Next message: hoop: "Re: History of intrusion detection"