Re: Host Based IDS
"JiPi DiNi" <[email protected]>
| Newsgroups | gmane.comp.security.ids |
|---|---|
| Message-ID | <[email protected]> |
On Tue, Oct 21, 2008 at 7:40 AM, <[email protected]> wrote: > Enterasys Dragon does have a HIDS product. It mainly supports IIS and > Apache on Linux as far as log monitoring; if you run other platforms like > Citrix, Apache on Windows, Lotus Domino or other web or ftp servers you'd > have to roll your own policy and signatures. > I personally find that the Enterasys Dragon HIDS is not that great. Mostly an LFM and you could accomplish this with another tool that would be free ;) No real shim or BOF protection. Maybe their new release is better then 6.x ... X ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------