Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 157
  • Last Modified:

compare current Intrusion Detection System !

there's many IDS: snort, Cisco IDS, RealSecure, NetProwler, Dragon, etc...
please experts, tell me their features; comparing their abilities, their strengths, their weakness.
thanks.
0
hoaivan
Asked:
hoaivan
  • 2
1 Solution
 
Tim HolmanCommented:
Do you really need IDS ?
It's a forensics tool, and although a very useful part of the security picture, it won't actually prevent intrusions without weeks worth of tuning and false positive removal...  and even then, I would not trust an IDS with upstream ACL modification and TCP reset ability not to do anything with my genuine traffic !
If you want to prevent intrusions, rather than detect (and notice a few days later), then you need an IPS.
Look at the IPS 5500 from TopLayer for example - www.toplayer.com.  :)

0
 
hoaivanAuthor Commented:
i just do some researches on IDS, not for choosing which product to buy/use.
and i wanna have a perspective of ids products.
0
 
Tim HolmanCommented:
SC mag have done a few vendor-neutral reviews in the past:

http://www.scmagazine.com/products/index.cfm?fuseaction=GroupTestDetails&GroupId=5876

0
 
ahoffmannCommented:
sounds like a very general question. So: do you have any problems keying in IDS in yur favorite search engine?
Or what else do you expect as answer?
0

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now