Security

Ask something
Discussion Locked

The best Intrusion detection?

0 helpful
6 replies

by sekhardash

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Can any one help me to know which one is the best IDS/IPS??

6 replies

by jaqui

Sans has recently had a series of webcasts on intrusion prevention, given by people who have gone through the process, for enterprise class networks ( including an internet access provider )

free portal membership to get access to the archives of the webcasts.

http://www.sans.org

by felixortiz

I have had a GREAT deal of success with Snort.

http://snort.org

and

http://www.winsnort.com for the windows crowd.

Keep in mind that any IDS is only as good as the rules that you are running on it so you will have to put some time into managing rules on any IDS but they are well worth it if you have to provide a law enforcement agency with proof that damage has been inflicted and by whom. Keep in mind that Intrusion Detection System is not by any means an Intrusion Prevention System. So your first step should be to have a properly fire walled and patched system to begin with. Some IDS (including Snort) can be coupled with scripts that shut out an offending IP by adding rules to a firewall but that is not the main function of the IDS.

by amit sharma

How abt snort inline for IPS.

You can use snort-inline to even support your opensource antivirus solutions. If properly configured & managed well we can say like 40% of bad traffic can be waived off by snort-inline.

by ashvinmanoj

from my knowledge i feel that snort an intelligent agent is power full from all.....

one advantage is its a open source and free of cost....
]right now i dono the limitations and i think that no drawbacks will be from it... if i feel so i will post here....

This discussion is closed to new replies.