Re: Anomaly Based Network IDS

From: Aaron Jordan (aaronj0rdan23_at_hotmail.com)
Date: 06/18/04

  • Next message: Koç.net: "RE: ssh and ids" 
    To: focus-ids@securityfocus.com, secdistlist@dauncey.net
Date: Fri, 18 Jun 2004 21:13:57 +0000

    My company uses Lancope's StealthWatch for anomaly based network IDS. We
    are quite pleased with its ability to detect zero-day undocumented attacks
    on our network. We're easily able to see into our network to examine what
    is actually happening on it versus what should be happening on it.

    We evaluated a few of the other products in this space and decided on this
    one since it was the easiest to use.

    --my $.02

    AJ
    "802.3"

    _________________________________________________________________
    Is your PC infected? Get a FREE online computer virus scan from McAfee®
    Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------

  • Next message: Koç.net: "RE: ssh and ids"

    Relevant Pages

    • network filesystem recommendations
      ... I'd like to share my /home/user directory across multiple machines - a couple of ... taking a look at remote filesystems. ... Ability to access the files from anywhere ... Ability to access/edit files without a network connection (rules out ...
      (comp.os.linux.misc)
    • Re: How doing I create a .sep printer separator page?
      ... >>> is the ability to assign a separator page (.sep file-type). ... >> That would only apply if the printer is on a network, ... >> your OS, Service Pack level ...
      (microsoft.public.office.misc)
    • Re: Cant browse PCs on Network
      ... >>>might not have permission to use this network resource. ... >I guess I missed some of the firewalls put in place by NIS which I thought I ... # ICMP provides the ability to ping, and / or to be pinged. ...
      (microsoft.public.windowsxp.network_web)
    • Req: Networking / Network Security consultants for Charlotte, NC
      ... Primary Skill: Networking / Network Security ... Working knowledge of NetScreen firewalls and NSM. ... Must have experience building IPSec VPNs between NetScreen firewalls ... Very strong ability ...
      (comp.unix.shell)
    • Re: Creating a Password
      ... ability to sniff the data off the LAN and then provide the ability to ... perform a Brute Force attack against the info acquired to obtain the ... >> Sniffing on the Network ... > attempts are done against the collected data file, ...
      (microsoft.public.security)