IDS: Re: ISS Siteprotector as syslog server?

["Andres Riancho" <andresit () fibertel com ar>]

Ronald ,
    As far as i know the only way to do that is to buy a Third Party Module
license from ISS . The TPM opens up a syslog server , parses the info that
is fed to it and then uploads all the data to the SP Database. There are
only two parsers , CiscoPix and Checkpoint FW.

Cheers ,

Andres Riancho

----- Original Message ----- 
From: "Bowes, Ronald (EST)" <RBowes () gov mb ca>
To: <focus-ids () securityfocus com>
Sent: Thursday, November 18, 2004 12:08 PM
Subject: ISS Siteprotector as syslog server?


> We're trying to get several different systems (ips and ids) to work
> together, as we're evaluating ips products made by various vendors.
>
> The ips appliances we're using can export their data to a syslog server,
and
> it would be nice if we could import the syslog data into ISS
SiteProtector.
> Has anybody tried to do that before?
>
> Thanks,
> Ron Bowes
>
>
> --------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from
> CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
> --------------------------------------------------------------------------

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------