IDS: RE: IDS

From: Alan Shimel <ashimel_at_stillsecure.com>
Date: Wed, 5 Jul 2006 17:50:27 -0400

Actually Cisco calls it Network Admission Control and the rest of the world
calls it Network Access Control

alan

StillSecure
Alan Shimel
Chief Strategy Officer

O 303.381.3815
C 516.857.7409
F 303.381.3881
email ashimel_at_stillsecure.com
blog http://ashimmy.typepad.com

www.stillsecure.com
The information transmitted is intended only for the person
to whom it is addressed and may contain confidential material.
Review or other use of this information by persons other than
the intended recipient is prohibited. If you've received
this in error, please contact the sender and delete
from any computer.

-----Original Message-----
From: Stefano Zanero [mailto:s.zanero_at_securenetwork.it]
Sent: Tuesday, July 04, 2006 3:52 PM
To: Gopinath_Ramamoorthy_at_satyam.com
Cc: focus-ids_at_securityfocus.com
Subject: Re: IDS

Gopinath_Ramamoorthy_at_satyam.com wrote:
> Dear Team...
>
> I have used few IDS in my network, doesn't found them working in the
> way i wanted.

If you have a problem with your stomach and take an aspirin, is the
aspirin to blame ?

> My requirement is when there is a machine / laptop are
> connected to my network, which is not updated with the current
> Patches, Security updates which is being approved needs to be
> reported to the Sys admin and immediate necessary steps would be
> taken.

What you describe is called (in the Cisco world) Network Access Control,
and in general Endpoint Control. Google for this, and you will find a
lot of information.

Stefano

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------

------------------------------------------------------------------------
Test Your IDS