TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- Hello, I'm in the process of deploying an ISS based IDS solution. So I define several phases to accomplish that project and I think it will be a good discussion to have regarding the different aspects of the deployment. So in my case I define several parts : 1- Establish an electronic policy based on the ISS component features. 2- Implement that policy (technical deployment) 3- definition of a logging management process 4- definition of a Incident response process The main problem I've got in fact is how made a ISS component IDS capacity a policy document (for the IT management for example). The second step is how define a process to build some custom signatures for exemple when a new vulnerabilities appears. How define the right policy for a network sensor for exemple regarding where you put it? ............. Thanks for your input. steve So I define several part __________________________________________________ Do You Yahoo!? Yahoo! Shopping - Thousands of Stores. Millions of Products. http://shopping.yahoo.com/
