RE: IDS ISS

From: Siddharth Phadnis (sphadnis_at_clear-trail.com)
Date: 05/19/05

  • Next message: THolman_at_toplayer.com: "RE: IDS ISS" 
    Date: Thu, 19 May 2005 17:45:37 +0530
To: Berteau Anatole <anatole.berteau@turbomeca.fr>, focus-ids@securityfocus.com

    Hi,
     You can deploy ISS software on one single box. You will require to have ISS RealSecure console (management console) installed with ISS sensor installed on the same machine. The one things that bugs me about installing ISS is the usage of MSDE or MS-SQL though. Why cant ISS port their RealSecure  on open OSs is beyond me.
     The Alers can be viewed on RealSecure console or depends on how u configure them.
     
     HTH,
     Siddharth
     
    ----- Original Message -----
    From: Berteau Anatole
    Sent: Wed May 18 2005 22:06:25 GMT+0530 (India Standard Time)
    To: focus-ids@securityfocus.com
    Subject: IDS ISS

    Hello,

    I'm testing IDS solution. After Snort, i'm beginning to work with ISS.

    What's the minimum architecture to use ISS? Is it possible to use only a network sensor? If this solution is available, what's the solution to consult alerts?

    Thanks

    Anatole

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from
    CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    --------------------------------------------------------------------------

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from
    CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    --------------------------------------------------------------------------

  • Next message: THolman_at_toplayer.com: "RE: IDS ISS"

    Relevant Pages

    • RE: IDS recommendations
      ... Ernon was the market leader in their business sector also. ... heard Enron was ISS' biggest customer so perhaps after Enron falls ISS will no ... We have replaced our Dragon sensors with Snort and our parent company is ... They are also the market leader in IDS ...
      (Focus-IDS)
    • RE: Intrushield vs. ISS once more...
      ... Personally, I reviewed ISS along with Cisco's IDS, NetScreen's and a few ... Test Your IDS ... Find out quickly and easily by testing it with real-world attacks from ... CORE IMPACT. ...
      (Focus-IDS)
    • RE: IDS ISS
      ... Have had several years experience with ISS. ... Sourcefire is doing some very interesting and innovative work with snort ... Subject: IDS ISS ... > Find out quickly and easily by testing it with real-world attacks from ...
      (Focus-IDS)
    • RE: How to choose an IDS/FW MSS provider
      ... but since ISS signatures are not purely "match this ... ISS MSS from our experience as an ISS reseller has been positive. ... >I guess you must be special to ISS, from my experience the support has been ... My impression about Cisco IDS for example is that they just do follow ...
      (Focus-IDS)
    • RE: IDS recommendations
      ... I love the ISS products. ... They are also the market leader in IDS ... If you like Linux you may also want to give Snort a whirl from ... to install and get running. ...
      (Focus-IDS)