Personally? Deploying the IDS is the easy part, its what comes after that which causes the most pain. Fine tuning and monitoring alerts are the two things about IDS that I dread.
------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
