IDS: RE: Host Based IDS Recommendations?

["Joshua Barnes" <JoshuaB () aos5 com>]

Cisco Security Agent.
Don't use e-trust, it is riddled with problems...and it's not very comprehensive.

-----Original Message-----
From: Teicher, Mark (Mark) [mailto:teicher () avaya com]
Sent: Tuesday, December 16, 2003 8:14 AM
To: Focus IDS; focus-ids () securityfocus com
Subject: RE: Host Based IDS Recommendations?


Depending on the features and the requirements of the enterprise network
one is deploying in.  What other products provide granular control in
the same space as Okena StormWatch ?

/mark

-----Original Message-----
From: Focus IDS [mailto:Focus-IDS () Compucenter org] 
Sent: Monday, December 15, 2003 4:48 AM
To: focus-ids () securityfocus com
Subject: RE: Host Based IDS Recommendations?



Depending on which features you need, you may want to look into Computer
Associates' eTrust Access Control. It is similar in focus to Okena
StormWatch, but adds user-based access controls (UBAC), and runs on a
wide range of UNIX platforms, Linux  and Windows. Reporting is weak and
alerting non-existent. Access Control needs to be supplemented by a
reporting and alerting solution (available separately from CA).

If you do not need UBAC, look elsewhere. But if you do, eTrust Access
Control is hard to beat.



------------------------------------------------------------------------
---
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
---------------------------------------------------------------------------


---------------------------------------------------------------------------
---------------------------------------------------------------------------