Re: [ISSForum] Proventia G in Passive Mode

2005-08-19 Thread Andrew Plato
How about getting a A604. It costs about the same as a G200 and you can monitor 4 segments. Proventia Gs can be used for passive monitoring, I've done it before. But its kludgy. Event correlation is confusing. And if you drop some other card in there - it will void your warranty and support.

Re: [ISSForum] Alerting on status of G200

2005-08-19 Thread Andres Riancho
Ray, Not sure if this is what you need , but the appliance will generate a Network_Silence event (viewable in SP) when it stops seeing traffic for a long time. Try setting the advanced parameter value of the Network_Silence to something that suits you. Cheers, Cotten, Ray wrote: Does

Re: [ISSForum] Proventia G in Passive Mode

2005-08-19 Thread CAUSEY, David
I didn't even realize you could do this! David Ps. I'll bet it does void the warranty! It means ISS loses out on selling an extra Pro G! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Castaldo, Benny J Sent: Tuesday, August 16, 2005 9:59 AM To:

[ISSForum] ProventiaM 3.1 firmware - Wine ?

2005-08-19 Thread Andres Riancho
List, Someone here knows why firmware 3.1 now comes with a running wine install ? [EMAIL PROTECTED] rc3.d]# head S98wine #!/bin/sh # # wine Allow users to run Windows(tm) applications by just clicking on them # (or typing ./file.exe) # # chkconfig: 35 98 10 # description: Allow users

[ISSForum] TCP-Hijacking Tool detected

2005-08-19 Thread meiner D
Hi, since some days we see tcp-hijacking_tool events in our environment. In the details I can see that the tools are of type Juggernaut and one was of type Spoofit. Now we would like to find out if these are false positives or if there are real hijacking attempts. Has someone experiences