IDS mailing list archives
ActiveScout (ForeScout) 100%?
From: Yaakov <yehudi () metacrawler com>
Date: Tue, 12 Nov 2002 12:14:10 +0200
I have been using ActiveScout for more than a year.Of course it is possible to set it up to be much less efficient than the 100% the company claims; but why would you do that?! (You could set up your firewall to pass all traffic in both directions too!)
This program is well worth looking at, and I believe that it will fit the IDS needs of many companies. No, I wouldn't choose to use it on its own, as I am a firm believer in the concept of multi-layered security. I wouldn't use a Firewall on its own either.
However in conjunction with hardening the servers and implementing similar "free" security measures, I believe that ActiveScout could provide a suitable security solution for many firms.
One feature that I particularly enjoy, is the geographical mapping of the sources of the attacks. You will see the major countries, states and cities where your attackers are (probably) coming from, in real time!
I have not used the latest version of the product yet, but understand it is an important upgrade and includes new features. I'm looking forward to installing it and assessing the abilities of the new ActiveScout version.
Current thread:
- ActiveScout (ForeScout) 100%? Yaakov (Dec 12)
