Hi,
1. AFAIK you can get RealSecure sitting on ODS-Switch and up to an certain
amount of traffic
it's able to investigate on a mirrored port.
2. BTW RealSecure is not realy passive :
- it can reconfigure FW-1
- kill suspicious connections
- and it can be setup in a stealth mode so can't be seen
> -----Original Message-----
> From: iCefoX [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, May 13, 1999 5:30 AM
> To: Michael Werlich
> Cc: John O. K.; [EMAIL PROTECTED]
> Subject: RE: Additions to the Firewall defenses.
>
>
> BTW, would this thing work in a high speed switching environment where
> each of its switch port is a single broadcast domain. I assume RealSecure
> is some form of software passively sitting and listening to the network
> for potential hostile hacker traffic.
>
> Please enlighten.
>
> iCefoX
>
> On Wed, 12 May 1999, Michael Werlich wrote:
>
> > Hi John,
> >
> > try realSecure from iss http://www.iss.net
> >
> > regards
> >
> > Michael
> >
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]]On Behalf Of John O. K.
> > > Sent: Wednesday, May 05, 1999 3:56 PM
> > > To: [EMAIL PROTECTED]
> > > Cc: [EMAIL PROTECTED]
> > > Subject: Additions to the Firewall defenses.
> > >
> > >
> > > I was wondering what people would suggest for supplementing
> thier defenses
> > > in regards to Intrusion Detection in an all NT based environment. The
> > > majority of the organizations I have worked in used Unix boxes to
> > > run their
> > > IDS so I have not researched IDS on NT only environments. I
> have worked
> > > with Host based software like Kanes and Axent's Omniguard but
> would like
> > > something with Network capabilities.
> > >
> > >
> > > -
> > > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > > "unsubscribe firewalls" in the body of the message.]
> > > -
> > > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > > "unsubscribe firewalls" in the body of the message.]
> > >
> >
> > -
> > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
> >
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
