RE: Dragon IDS & Enterasys Equipment

From: M Shirk (shirkdog_linux_at_hotmail.com)
Date: 07/21/04

  • Next message: Kyle Maxwell: "Fortinet IDS"
    To: focus-ids@securityfocus.com
    Date: Wed, 21 Jul 2004 07:15:00 -0400
    
    

    Enterasys will soon be releasing its Secure Network offering (this may or
    may not be the correct name). Dragon is simply the IDS part which will work
    the same with new features (more network interfaces are supported, this will
    be version 7.0 of Dragon). The Secure network will use Enterasys Switches
    with the Dragon IDS to basically build FIREBREAKS on the network. There is a
    separate correlation database to report to, but basically its is a glorified
    IPS solution. It is a product that would require a change to an entire
    infrastructure, not just stuff in your DMZ.

    -----Original Message-----
    From: jctx09@yahoo.com [mailto:jctx09@yahoo.com]
    Sent: Sunday, July 18, 2004 10:36 AM
    To: focus-ids@securityfocus.com
    Subject: Dragon IDS & Enterasys Equipment
    Importance: Low

    My vendor has stated that with the Dragon IDS system it could automatically
    disable ports on my E7 & N7 (Switches) Enterasys equipment automatically to
    stop a client in its tracks. Has anyone ever used the Dragon IDS with
    Enterasys switches? Is it really out of the box like that? Any info would be
    appreciated. Thank you

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from CORE
    IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to
    learn more.
    --------------------------------------------------------------------------

    _________________________________________________________________
    Overwhelmed by debt? Find out how to ‘Dig Yourself Out of Debt’ from MSN
    Money. http://special.msn.com/money/0407debt.armx

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from CORE
    IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
    --------------------------------------------------------------------------


  • Next message: Kyle Maxwell: "Fortinet IDS"

    Relevant Pages

    • RE: Updating Enterasys Dragon NIDS signature...
      ... signature set in each time. ... with someone in the Dragon group). ... Updating Enterasys Dragon NIDS signature... ... Test Your IDS ...
      (Focus-IDS)
    • RE: Where is Ron Gula? (was "Changes in IDS Companies?")
      ... This answer is coming from someone on the Dragon team (who already gets enough spam in his ... Enterasys account - so I apologize in advance for using the @yahoo.com addy. ... If you read the "Dragon Newsletter" that I put out on the Dragon IDS users list, ... Subject: Where is Ron Gula? ...
      (Focus-IDS)
    • Re: Re: port mirroring for two targets
      ... appliance from Enterasys (Dragon IDS). ... Test Your IDS ...
      (Focus-IDS)
    • Re: Dragon IDS suffering
      ... > Do you think Dragon IDS will be spun out of Enterasys or shut-down? ... Dragon is a purely pattern-recognition IDS like NFR and Snort. ... RealSecure is in the process of swapping out its core technology. ...
      (comp.security.misc)
    • Re: IDS Players?
      ... My opinions in short: ... >Enterasys Dragon ... The Dragon mailing list is informative and excellent; ... >Cisco IDS ...
      (Focus-IDS)