Re: 2 security issues

From: quentyn@fotango.com
Date: 12/10/01


Date: Mon, 10 Dec 2001 17:20:37 +0000
From: quentyn@fotango.com
To: Robin Lynn Frank <rlfrank@paradigm-omega.com>


> 2. What real-time alert system are available to notify users of security
> problems as they occur.? (Most of our people are Window refugees and are used
> to products like ZoneAlarm.) I've looked at apps such as firestarter, but
> need the opinions of others.
>

if on the network then snort (www.snort.org).

if host based LIDS (www.lids.org)

if you want a "kind of zone alarm" for linux then portsentry (though I
haven't used it so I might be wrong) might be worth looking at.

However iplog is good if combined with logwatch for more realtime alerts
(but this is limited as to what it will do)

http://freshmeat.net/ is a good place to look

the above should give the basis to build a "real time" alerting system

Q

-- 
#####################
Quentyn Taylor
Sysadmin - Fotango
#####################
According to the obituary notices, a mean and unimportant person never
dies.



Relevant Pages

  • Re: zonealarm program icons
    ... but its been bugging me since I upgraded to ... >Is there any way of getting Zonealarm to display more than 4 program icons ... The best way of looking to see what apps are currently using the ...
    (comp.security.firewalls)
  • Re: Are there any firewall software that block programs from running?
    ... Gerald Vogt wrote: ... I use ZoneAlarm to stop Virtual PC accessing the net. ... Well, umm, I want vmware and virtual pc to not be able to access the ... don't know if norton can do this or other apps maybe can. ...
    (comp.security.firewalls)
  • Re: windows defender
    ... Other AV apps: ... http://www.avast.com/i_idt_1016.html free Home Edition ... ZoneAlarm by Zonelabs: ...
    (microsoft.public.windowsxp.general)
  • Re: Q about ISA 2004 beta, outbound connections
    ... You don't have to block TCP 80 for all apps, you can block just the warezing ... Configuring ISA Server: http://tinyurl.com/1llp ... I can do this easily with ZoneAlarm, but I'm not clear on if ISA has this ...
    (microsoft.public.isaserver)
  • Re: Q about ISA 2004 beta, outbound connections
    ... Well, with zonealarm we can use apps like MSN messenger, we can't with ISA ... > personal firewall, not a network firewall, so there's no comparison ...
    (microsoft.public.isaserver)