Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Affordable Network Behavior Analysis alternatives
From: Steven Rakick <stevenrakick () yahoo com>
Date: Thu, 22 Jul 2004 10:48:17 -0700 (PDT)


You may want to take a look at the nSight behavior
analysis product from Intrusense

We were actually in a similar bind a while back and
came across their beta program. We've been using it
ever since and will be buying it as soon as their
release version comes out. 

It has both standalone and distributed installation
types and dead simple to install and configure.
Overall it has less functionality than QRadar but it
made up for that in cost. While we haven't
*officially* purchased it yet, we were quoted under
$10,000 for the distributed version with support for 3
collector agents.

Still too much? You may also want to take a look at
Snort and Ntop then.

Feel free to email me if you want more details.


Thu, 22 Jul 2004 13:33:15 -0400
Jeff Gillian  jeff.gillian () gmail com wrote:

Hi list,

Since it appears the SecurityFocus Sectools and IDS
lists are dead, I
thought I'd repost this here.

I recently saw a posting on FocusIDS regarding the
high cost of the
most commercial solutions. The one mentioned was the
QRadar product
from Q1Labs. Don't get me wrong, we have a budget, we
just don't have
a Fortune 500 budget. :)

My question is simple, are there any other commercial
alternatives to QRadar? Something that isn't going to
cost me >$40,000
to deploy?

Any input would be appreciated.


Jeff G.

Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]