Intrusion Detection Systems: Re: Counterpane Managed Security Monitoring

[diphen () agitation net (diphen () agitation net)]

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
That describes us fairly well... Our 'Sentry' box basically gathers
syslog, SNMP traps, and mail alerts from various devices/software and
decides whether or not it's important enough to worry about based on our
filter set.  If it is, the data is sent back to one of our SOCs and
depending on the severity we'll either notify the customer with
information and recommendations, or include the information in a weekly
summary report.

-gabe
(Speaking as a person familiar with Counterpane and it's offering, not
as a representative of the company.)

On Tue, Jul 18, 2000 at 12:26:19PM -0400, b.g.miller wrote:
> Archive: http://msgs.securepoint.com/ids
> FAQ: http://www.ticm.com/kb/faq/idsfaq.html
> IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
> HELP: Having problems... email questions to ids-owner () uow edu au
> NOTE: Remove this section from reply msgs otherwise the msg will bounce.
> SPAM: DO NOT send unsolicted mail to this list.
> UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
> -----------------------------------------------------------------------------
> Has anyone on the list had experience with the new offering from Counterpane - Counterpane Managed Security 
> Monitoring?  Seems to be
> a meta-IDS bundled with a 24/7 staff.
>
> http://www.counterpane.com/whitepaper.html