IDS shuts down network access?

From: admin too (nguser2u_at_no.spam.AOL.com)
Date: 04/05/04 

Date: Mon, 5 Apr 2004 12:31:06 -0700

Is there an IDS which can block a machine from a network when it's been
infected with a trojan? At least block Internet access, if it's a box
positioned behind the firewall.

A guy from Network Associates cold-called today to ask me about IDS and when
I asked him this he said he'd have to check with an engineer. Funny, to
seems like that's something which should be mandatory for an IDS.

Relevant Pages

  • Re: IDS shuts down network access?
    ... What the IDS would basically do is that it would send some alarms. ... admin too wrote: ... > Is there an IDS which can block a machine from a network when it's been ... At least block Internet access, ...
    (comp.security.firewalls)
  • Re: IDS and NMS
    ... Start by designing and installing a network. ... Next, a more detailed view of the network is required, so a NMS is ... the network administrator wants to see what ... This is where integrating the IDS console into the NMS makes sense. ...
    (Focus-IDS)
  • Re: "false positive" inanity
    ... So Mr. Snyder is asking for an IDS that does not need to be configured? ... maximum control of his/her network. ... attack. ... > assuming that it is not an intrusion. ...
    (Focus-IDS)
  • Re: Secure Network Design (DMZ, LAN, etc)
    ... I'd like one outside the firewall and one ... I assumed I could make the first IDS ... should I have the IDS listening on the 192.168.1.0/24 network as well (web ... >Since the whole world will need access to your web servers, ...
    (Security-Basics)
  • Re: which attacks will generate false positive or false negative?
    ... addresses of the servers on your network that are allowed to do DNS Zone ... you first install a Network IDS, snmpwalks may trigger from your network ... Matt brings up the point of alerts to things that didn't have any ... you're not sure of the best way to tune out false positives during your ...
    (Focus-IDS)
Quantcast