Intrusion Detection Systems mailing list archives

Re: RealSecure and Alternate Database


From: blue0ne () igloo org (Jackie Chan)
Date: Fri, 31 Mar 2000 04:56:37 -0500 (EST)


Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
I've seen the E-Security technology successfully deployed in networks
monitoring well over 10,000 different devices/products.  Aspects of the
software that make this easier to do include the ability to have several
OeSP (Open Esecurity Platform) systems doing localized monitoring and
sending critical events upstream to a master system (kind of a "hub and
spoke" monitoring arrangement).  This tiered structure can be any depth or
breadth (as the OeSP systems can also serve as redundant backups to other
OeSP systems).  

From what I understand, the March Release contained an implementation of
SNMP v3 which includes authentication and encryption.

Cheers,
blue0ne

On Thu, 30 Mar 2000, Misha wrote:

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owner () uow edu au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
-----------------------------------------------------------------------------
Has anyone used the E-security products in wide deployments? I am trying
to figure out if its worth the price or if its better to just to develop
the code internally.

I haven't really seen what the capabilities of the agents are yet.

Misha



On Wed, 29 Mar 2000, Jackie Chan wrote:

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owner () uow edu au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
-----------------------------------------------------------------------------
Kevin ,
    If you are intereedted, I made somde executables to allow RS to
talk to MS SQL server before they supported it, as long as you had an
ORacle Driver for NT, you could make a few minor adjustments and be able
to send the information to Oracle.  If your not up to the programming,
check out http://www.esecurityinc.com  They use Oracle as there DB of
choice.  If they dont already have an agent for RS, They will in the
future.


Cheers,
blue0ne

On Wed, 29 Mar 2000, Kevin Johnston wrote:

I know you can use a Microsoft SQL Server database in place of the MS
Access database for RealSecure.  Anyone ever try and was successful in
using ORACLE?  ISS says they do not support it.  Thanks.

- Kevin






Current thread: