I would recommend you take a look at the IDS review in the august issue of Network Computing, it does a pretty good job of reviewing the major IDS offerings. They gave the top 3 as Enterasys Dragon, Cisco IDS and Snort. Snort is an open source product, is very configurable and is obviously going to be the lowest up-front cost. (you can download snort and associated add-ons at http://www.snort.org) The only reason Snort wasn't first was that it doesn't have a nice management interface. (not built in anyway, but see below)
I've worked with both Dragon and Cisco IDS and they are both solid products. Cisco seems to be focusing a lot of effort in the IDS area right now and the IDS blade that goes into the Cat 6500 chassis, coupled with the ability to use Cisco routers as IDS collectors, makes the Cisco solution very attractive for large Cisco environments. For small environments, Dragon probably has an edge. For very small shops or shops with very small budgets, Snort can do an excellent job if your comfortable with not having an enterprise class management interface. (although Demarc is a very interesting front-end gui that can be used with snort http://www.demarc.org) HTH, Kent -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of nrf Sent: Thursday, January 03, 2002 4:47 PM To: [EMAIL PROTECTED] Subject: OT - to security experts - what's the best IDS? [7:30867] Hello all: I am directing this question to security experts. Who makes the best IDS system? Cisco with NetRanger? Realsecure with ISS? Network Associates Cybersafe? Something else? I leave the precise definition of 'best' up to you. But it should include things like flexibility, reliability, lots of features, ease of use, and of course price. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=30922&t=30867 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
