Re: IDS: SessionWall

Misha (mishainsync.net)
Fri, 17 Sep 1999 20:19:48 -0500 (CDT)

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: ARashoud: "IDS: Re: SessionWall"
• Previous message: Michael.Owennet-tel.co.uk: "IDS: Introduction"
• Next in thread: ARashoud: "IDS: Re: SessionWall"

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owneruow.edu.au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
USUBSCRIBE: email "unsubscribe ids" to majordomouow.edu.au
---------------------------------------------------------------------------

---
I tested it for several weeks and it had pretty good results for the
price. It was extremely easy to use and showed a lot of real time
empirical data about the network use which is helpful as well. The IDS
portion of it was pretty basic, but solid, concentrating mostly on layer 7
attacks. I especially liked the ability to manually add basic signatures
easily. The alerting and logging leaves a bit to be disired, and the
product as a whole does not compare to a full blown IDS product like Real
Secure and NFR or a very network-centric IDS like Shadow.
SessionWall was pretty much focused on NT networks, with heavy NetBIOS
protocol and mostly Windows attack signatures, so I would definitely
recommend it for small to medium sized NT networks with limited security
budgets.
Misha
On Fri, 17 Sep 1999, [iso-8859-1] Kößler Lars wrote:
> FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
> IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
> HELP: Having problems... email questions to ids-owneruow.edu.au
> NOTE: Remove this section from reply msgs otherwise the msg will bounce.
> SPAM: DO NOT send unsolicted mail to this list.
> USUBSCRIBE: email "unsubscribe ids" to majordomouow.edu.au
> ---------------------------------------------------------------------------
> ---
> Hello, 
> has naybody experiences with SessionWall-3?
> 
> Thanks in advvance,
> Lars
> 

• Next message: ARashoud: "IDS: Re: SessionWall"
• Previous message: Michael.Owennet-tel.co.uk: "IDS: Introduction"
• Next in thread: ARashoud: "IDS: Re: SessionWall"

This archive was generated by hypermail 2.0b3 on Sat Sep 18 1999 - 08:19:17 CDT