Arguments for Snort

[tfandango <tfandango () yahoo com>]

Hi All-

I work for a large company in their IDS department. 
There are a lot of cutbacks going on and the consensus
is that we will probably drop some of our ISS licenses
this year.  Some of our senior members are running
around complaining that we will lose IDS coverage yada
yada yada.

I see this as a wonderful opportunity to deploy snort
boxes instead as I haven't been too fond of ISS's
tools and frankly I find some of their licenses
insulting.

My problem is that this company is very resistant to
change and especially change with open source
applications (Some of our members specialize in FUD). 
Just wanted to know how Snort compares to ISS on a
technical standpoint.  Is there really any advantage
to using ISS over Snort besides the fancy and very
slow GUI interfaces?  I plan to present this to my
manager.

Thanks...
T.

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users