IDS: Re: Real-time IDS for Windows NT?
Brent Huston (bhuston@netwalk.com)
Mon, 15 Sep 1997 10:07:33 -0400
I have worked with Real Secure from ISS and found it to be excellent. The
engine can run on either NT or Unix, while the manager must run on NT to
control the NT engines. The system provides real time ID, as well as other
network attack recognition's, traffic analysis, and even offers custom
filters and responses. The manager supports session recording for telnet
and ftp, paging, email, connection resets, and much more!!
Give me a call @ 614-351-1237 or check out the ISS page @
http://www.iss.net
Thanks!
--Brent Huston, MicroSolved
----------
> From: adamsb@un.org
> To: ids@uow.edu.au
> Subject: IDS: Real-time IDS for Windows NT?
> Date: Sunday, September 14, 1997 9:31 AM
>
> I have worked on half a dozen different networks over the past six
> years and the two most effective intrusions I saw were through
> out-of-the-box Windows NT installations with dial-up modems.
>
> Recently I ran my own command files to check the security on 12
> newly installed NT boxes and every one of them had most of it security
> turned off. This looks like it is going to be a continuing problem.
>
> Does anyone have any experience with a Windows NT based real-time
> intrusion detection system that is commercially available?
>
> Hog Farmer,
> formerly with
> Tropical Hog Improvement Programme