RE: ISS RealSecure/SiteProtector or another IDS/firewall client?

[Gwendolynn ferch Elydyr <gwen () reptiles org>]

On Tue, 25 Nov 2003, Alan Shimel wrote:
> Without appearing to prejudice I would recommend you take a look at our
> border gateway system, easier to use, cheaper than ISS with some
> interesting new features that ISS does not have

Perhaps I'm missing something - I thought that this list didn't allow
commercial advertisements.

[Ben Wrote:]
> Subject: ISS RealSecure/SiteProtector or another IDS/firewall client?
> Has anyone had experience with ISS products, particularly their
> RealSecure line?
>
> We are planning for the upgrade (several years late) to Windows XP in
> our computer labs, and need a client-based firewall/IDS that can be
> centrally managed and has a decent logging system.  RealSecure looks
> like a good choice for us, but I thought I'd ask if anyone's had
> experience or could recommend an (or several) alternates?

I had bad experiences with ISS RealSecure [and they seem to be calling
it "Proventia" now] when I last used it, but my understanding is that
since then they've changed to using the Black Ice engine, and many
things have improved.

At the time [it's been a year-and-a-bit, so take this with a grain of
salt], it tended to drop packets a lot, have a ton of false positives,
and also be a pain to configure correctly.

> From all accounts, the Black Ice engine should have made a dramatic
difference to the overall performance and capabilities.

cheers!
==========================================================================
"A cat spends her life conflicted between a deep, passionate and profound
desire for fish and an equally deep, passionate and profound desire to
avoid getting wet.  This is the defining metaphor of my life right now."


---------------------------------------------------------------------------
---------------------------------------------------------------------------