IDS: RE: Intrusion Prevention

[Avi Chesla <avic () V-Secure com>]

Hi,

I didn't have the chance to use Active scout and I familiar with that a lot
of work has been done recently to reduce the number of false positive
detections but in reality security devices that claim to detect attacks
without false positives do so only for trivial attacks (attacks that are
usually ineffective).  They systematically  miss out on sophisticated
attacks which are more and more common using widely available automated
hacking tools.


Avi Chesla

-----Original Message-----
From: intrusi0n () cox net [mailto:intrusi0n () cox net] 
Sent: Friday, December 06, 2002 5:12 AM
To: focus-ids () securityfocus com
Subject: Intrusion Prevention


Hello everyone, 

Has anyone here seen or used ActiveScout, by ForeScout technologies? It
claims to have a 100% accuracy , no false positives. I am rather skeptical,
but I was wondering if anyone here has any expertise using or evaluating
this. 

Any input is greatly appreciated!

()()()()()