RE: IDS/IPS Management devices

["Gary Halleen" <ghalleen () cisco com>]

If you haven't seen the SAFE Whitepaper, it's worth reading.  Security
management stations absolutely need to sit on protected networks.

http://www.cisco.com/go/safe

Gary
 

-----Original Message-----
From: Biswas, Proneet [mailto:pbiswas () ipolicynetworks com] 
Sent: Thursday, March 24, 2005 11:35 AM
To: focus-ids () securityfocus com
Subject: IDS/IPS Management devices

One of the issues which we have seen with IDS/IPS vendors shipping
Management stations to manage their devices is that customers start
questioning how secure the management station is as it is mostly windows
based platforms and there are no Anti-Virus software etc. running on them.
So is it safe to suggest that the management station  should be sitting
behind one of the security devices which is managing it.
Any thoughts ?



--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------