Re: IDS: Security assessment tools

Steve Manzuik (smanzui1@isma.com)
Fri, 9 Apr 1999 09:01:49 -0600

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems.. Then email questions to ids-owner@uow.edu.au
NOTE: You MUST remove this line from reply messages as it will be filtered.
SPAM: DO NOT send unsolicted mail to this list.
USUB: email "unsubscribe ids" to majordomo@uow.edu.au
---------------------------------------------------------------------------

A few months ago I did some testing and comparing between the ISS Scanner and
the NAI Cybercop Scanner.  You can find it in the NTBUGTRAQ archives at
www.ntbugtraq.com

When I did my testing and comparing, the ISS product was the best, hands down.
>From reliability to basic customer support they were the best.  Since my post, I
was contacted by the NAI CyberCop team and I got the chance to beta test their
latest version which is now released in full.  I liked what they have done to
improve.  In fact, the only area that I find the ISS product better is in its
reporting.  ISS uses Crystal Reports to produce some excellent looking reports
where the NAI product is a bit lacking when it comes to reporting.  As far as
support and customer server goes, I would have to still give the nod to ISS.
They have always treated me and my clients very well.  NAI, treated me great
when they wanted me to beta test, and when they thought I was going to recommend
their product, but, they proved that all they were looking for was someone to
discount the ISS product and recommend their publicly.  When I did not want to
do this, they stopped talking to me.  tsk tsk.

I plan on doing my same tests again in my lab comparing ISS, NAI, and Axent.
Hopefully, I will be able to get proper demos out of each of them.  I will be
posting my results on NTBUGTRAQ and if asked, I will post them here.






Carric Dooley <carric@com2usa.com> on 04/08/99 12:21:44 PM

To:   ids@uow.edu.au
cc:    (bcc: Steve Manzuik)
Subject:  IDS: Security assessment tools




FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems.. Then email questions to ids-owner@uow.edu.au
NOTE: You MUST remove this line from reply messages as it will be filtered.
SPAM: DO NOT send unsolicted mail to this list.
USUB: email "unsubscribe ids" to majordomo@uow.edu.au
---------------------------------------------------------------------------

Hello, I am new to this list, but I saw some names I recognized and
decicded to "sign up".

I was wondering if anyone had some good info on security scanners and what
was considered a good one.  I have worked with ISS and some of the better
"home-brew" tools, but someone asked me about Netect and I am not familiar
with that particular product.  I know ISS is sort of the de facto scanner,
but how do the others measure up?

Thank you.

Carric Dooley
COM2:Interactive Media
http://www.com2usa.com