Re: IDS for Pix Firewall

From: Andrew Plato (aplato@anitian.com)
Date: 02/10/02


Date: 10 Feb 2002 07:02:32 -0000
From: Andrew Plato <aplato@anitian.com>
To: security-basics@securityfocus.com


('binary' encoding is not supported, stored as-is)

In-Reply-To: <20020207114618.25570.qmail@mail.securityfocus.com>

Snort (Sourcefire), Dragon IDS, Network Flight
Recorder, BlackICE Sentry, Cisco IDS - take your
pix :-)

Snort is definately the cheapest, but it will take you
longer to setup and get alerts.

Personally - Snort and BlackICE are probably the
best performance-wise. But I am biased because this
is what I use. I've been testing Dragon lately...seems
good.

Andrew Plato
President / Principal Consultant
Anitian Corporation
www.anitian.com