Intrusion Detection Systems mailing list archives

Re: IDS


From: emmanuel () siamrelay com (Emmanuel Gadaix)
Date: Wed, 03 Nov 1999 17:03:29 +0700



Stefano Maifreni wrote:

I think the simplest solution is an IDS on a dedicated machine.

e.g.: ISS Real Secure Engine + Monitor

What do you think about ??

The "network engine" (sensor) is better left alone and it is probably
wiser to have to monitor/console application run on a separate server.
Otherwise your GUI and DB queries will slow down the (busy) sensor and
possibly increase your dropped packets.


-- 
Siam Relay Ltd.
http://www.siamrelay.com
Information Security Services
Electronic Payment Processing



Current thread: