Re: Real Traffic (was Re: BlackICE IDS)

[misha () insync net (Misha)]

> At Security Wizards, we tend to get one or two calls a month from other
> vendors that want to aggregate multiple IDS sensors and/or the entire
> suite of security products from virus detectors to network IDS products.

This is the idea behind a product called netForensics. We will be using
them for Pix events management, but it includes support for anything from
IIS, Apache, Sendmail servers, to IOS firewalls, virus scanners, NetSonar,
NetRanger, Cisco based IPSec devices, etc. The product has an analysis
module for even corelation and a real time agent for real time alarms. I
have asked them if they plan on either opening the development platform or
provide support for any other vendors than Cisco, and the answer for the
near future was no.

www.netforensics.com

Misha