RE: IDS newbie

From: Matt Schaelling (mschaelling@cricketcommunications.com)
Date: 08/09/02 

From: Matt Schaelling <mschaelling@cricketcommunications.com>
To: 'Don Berlin' <securebutneedhelp@yahoo.com>, security-basics@securityfocus.com
Date: Fri, 9 Aug 2002 13:07:55 -0700

go to rr.sans.org. You will need to register for the room to see the
articles but its free. I have found complete walkthroughs including pros
and cons for several different systems.

Have fun!

Matt

-----Original Message-----
From: Don Berlin [mailto:securebutneedhelp@yahoo.com]
Sent: Thursday, August 08, 2002 12:23 PM
To: security-basics@securityfocus.com
Subject: IDS newbie

Security Pro's, I need help. I am a security newbie
and
have been assigned the task of researching IDS's. I
would appreciate any assitance that I can get from
you, the professionals.

Specifically: What type of IDS do you recommend? What
brand of IDS do you recommend. What are the
pro's/con's of the tool that you recommend.

Additionally, I would like to know what folks are
using to consolidate logs(NT/2000
server/firewalls/IIS) and generate reports.

Please respond off list so as to not load the list
with this newbie stuff. Thank you in advance!

__________________________________________________
Do You Yahoo!?
HotJobs - Search Thousands of New Jobs
http://www.hotjobs.com

Relevant Pages

  • IDS newbie
    ... I am a security newbie ... would appreciate any assitance that I can get from ... What type of IDS do you recommend? ...
    (Security-Basics)
  • Re: IDS Opinions
    ... what is the throughput requirement for the IDS. ... options then the best fit will be Snort or CA. Snort is a freeware with ... >I recommend you to download the trial and test it yourself... ... >Subject: IDS Opinions ...
    (Focus-IDS)
  • Re: MSSP / IDS Selection
    ... If you're still trying to determine whether or not to go with an MSS vs ... For those customers we often recommend ... Perhaps you are looking for the managed IDS without ... It appears to offer services that Snort does not, ...
    (Focus-IDS)
  • Re: MSSP / IDS Selection
    ... after being involved in MSSP from back in 99, I did then and still have ... Can these providers manage my legacy products effectively as well? ... Subject: MSSP / IDS Selection ... For those customers we often recommend ...
    (Focus-IDS)
  • Re: Intrusion Detection recommendations
    ... > Can anyone recommend a really good Intrustion Detection system?? ... I assume you're talking Network IDS. ...
    (microsoft.public.win2000.security)