OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Michael Coliton (MCOLITONTWMI.RR.COM)
Date: Tue Apr 03 2001 - 07:26:46 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    There are known vulnerabilities in most IDS products.
    The cause for concern I have is the number of dropped packets Real Secure
    does not inform you of.
    At 100MB switched traffic, it catches less then 80% of packets, meaning 20%
    go through. At Gig, it's only catches 1 in 5, meaning its only catching
    20%.....false security can be worse then no security.

    Real Secure is a mature solution with many nice features, ISS just hasn't
    found a way to make it effectively work in a high speed network.

    What is the speed of your environment?

    Mike
    ----- Original Message -----
    From: <William_D._Estavillo/BPI%BPIPHBPI.COM.PH>
    To: <FOCUS-IDSSECURITYFOCUS.COM>
    Sent: Monday, April 02, 2001 10:58 PM
    Subject: IDS Vulnerability

    > Hi everybody,
    > Can you please help me find an article about IDS vulnerability
    > particularly on Real-Secure. Appreaciate your response. Thanks.
    >
    > William