Intrusion Detection Systems: Tivoli Cross-Site for Security (was: RE: Ramping up for another r eview)

[ALustiger () datek com (Lustiger, Alan)]

I'm trying to put together a framework for an IDS system, and I'm looking
at Tivoli as a back-end database to consolidate and correlate alarms from
various NIDS. Now it looks like Tivoli might have its own complete solution
(http://www.tivoli.com/products/documents/datasheets/cross-site_sec.html) .

Has anyone looked at using this either as their entire solution or as an
integrator for existing NIDS, HIDS and firewall log files?

Thanks!

--
Alan Lustiger
alustiger () datek com