Intrusion Detection Systems: Re: RealSecure and Alternate Database -reply

From: <Mark.Teicher_at_predictive.com>
Date: Sun, 2 Apr 2000 07:34:30 -0700

Jackie Chan <blue0ne_at_igloo.org>
Sent by: owner-ids_at_uow.edu.au
03/31/00 01:56 AM

        To: Misha <misha_at_insync.net>
        cc: Kevin Johnston <johnston_at_syrres.com>, ids_at_uow.edu.au
        Subject: Re: IDS: RealSecure and Alternate Database

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo_at_uow.edu.au
I've seen the E-Security technology successfully deployed in networks
monitoring well over 10,000 different devices/products. Aspects of the
software that make this easier to do include the ability to have several
OeSP (Open Esecurity Platform) systems doing localized monitoring and
sending critical events upstream to a master system (kind of a "hub and
spoke" monitoring arrangement). This tiered structure can be any depth or
breadth (as the OeSP systems can also serve as redundant backups to other
OeSP systems).

>From what I understand, the March Release contained an implementation of
SNMP v3 which includes authentication and encryption.

Cheers,
blue0ne

On Thu, 30 Mar 2000, Misha wrote:

> Archive: http://msgs.securepoint.com/ids
> FAQ: http://www.ticm.com/kb/faq/idsfaq.html
> IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
> HELP: Having problems... email questions to ids-owner_at_uow.edu.au
> NOTE: Remove this section from reply msgs otherwise the msg will bounce.
> SPAM: DO NOT send unsolicted mail to this list.
> UNSUBSCRIBE: email "unsubscribe ids" to majordomo_at_uow.edu.au
>
> Has anyone used the E-security products in wide deployments? I am trying
> to figure out if its worth the price or if its better to just to develop
> the code internally.
>
> I haven't really seen what the capabilities of the agents are yet.
>
> Misha
>
>
>
> On Wed, 29 Mar 2000, Jackie Chan wrote:
>
> > Archive: http://msgs.securepoint.com/ids
> > FAQ: http://www.ticm.com/kb/faq/idsfaq.html
> > IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
> > HELP: Having problems... email questions to ids-owner_at_uow.edu.au
> > NOTE: Remove this section from reply msgs otherwise the msg will
bounce.
> > SPAM: DO NOT send unsolicted mail to this list.
> > UNSUBSCRIBE: email "unsubscribe ids" to majordomo_at_uow.edu.au
> >
> > Kevin ,
> > If you are intereedted, I made somde executables to allow RS to
> > talk to MS SQL server before they supported it, as long as you had an
> > ORacle Driver for NT, you could make a few minor adjustments and be
able
> > to send the information to Oracle. If your not up to the programming,
> > check out http://www.esecurityinc.com They use Oracle as there DB of
> > choice. If they dont already have an agent for RS, They will in the
> > future.
> >
> >
> > Cheers,
> > blue0ne
> >
> > On Wed, 29 Mar 2000, Kevin Johnston wrote:
> >
> > > I know you can use a Microsoft SQL Server database in place of the
MS
> > > Access database for RealSecure. Anyone ever try and was successful
in
> > > using ORACLE? ISS says they do not support it. Thanks.
> > >
> > > - Kevin
> > >
> > >
> >
>
Received on Apr 02 2000