Use both of these products in conjunction.  As they both have strengths
and weaknesses, use the strengths of one to cover the weaknesses of the
other.  Having two IDS systems, one inside your network and one outside,
is like using two different vendors for anti-virus...use one product at
the gateway and another on the desktop.  In this manner, if one misses
something, the other should catch it.

my $0.02

Steve Schuster




-----Original Message-----
From: Tim Anderson [mailto:[EMAIL PROTECTED]]
Sent: Thursday, November 29, 2001 12:16 PM
To: [EMAIL PROTECTED]
Subject: [FW-1] Best IDS??


We have budget to purchase an IDS and would like to get suggestions from
you
fine folks.  We are looking at SNORT since it is free (except for the
equipment costs) and ISS Real Secure.  We are open to other suggestions
as
well.  Also where do you guys have your sensors?  We were thinking that
having one on the DMZ is probably enough but we want some input from
others
before we decide.  Thanks!

Tim Anderson

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================

Reply via email to