Re: BlackICE & SQL Slammer

From: Alexander Delarge (alex@nowhere.com)
Date: 01/29/03 

From: "Alexander Delarge" <alex@nowhere.com>
Date: Wed, 29 Jan 2003 19:45:12 GMT

"Duane Arnold" <notme@notme.com> wrote in message
news:RkUZ9.87334$AV4.3233@sccrnsc01...

> There are four types of the following:
>
> 1) Someone who has heard about BID wrongly -- due to *Gibson*.
> 2) Someone who has tried BID and had no *clue*.
> 3) Someone who has tried BID and doesn't understand how it really works.
> 4) Someone who is using BID and don't know how to use BID to its fullest
> capabilities
>
> I consider myself a number 4 and I got some more learning to do and I am
> pretty damn good with using the product.

Yeah, I am kind of a 4 as well. I know how to do a lot of things with it.
But everytime I think I know BI inside and out, I am suprised with something
else I can do. The guy you really want to talk to is Andrew Plato at Anitian
(www.anitian.com). He is the one that designed this slammer fix (ISS didn't
even come up with it). I find myself being a cheerleader for Andrew lately.
He can make blackice (as well as watchguard firewalls) do things nobody
knows how to do. You should see this one system he has. Its a blackice box
that can, in **real-time**, IDS and filter traffic for an entire network.
its an in-line protection/detection system. The thing is amazing. I wish we
had the money to buy one (they cost like $18,000, but its hardware and
everything). I told my boss I want one and he said maybe next year. we got
our fukin' budget slashed this year so no more toys.

I also agree that most people have no idea what is under the covers with
blackice. I don't see anybody coming out with cool configuration choices for
zonealarm or sygate. All I see is "ZAP killed my box, help me I think I have
a worm, I love steve gibson"

Anyway. good luck dudes.

Alex
alexanderdelarge(AT)hushmail.com

Quantcast