TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------

Here is the issue, unless one tunes their ISS RealSecure policy to only
log certain alerts and others to the screen, one could theoretically fill
up the  rsclient file very quickly with lots and lots of attacks using one
of the many freely available exploit scripts available (i.e. targa2,
targa3, jolt, jolt2)

There are ways available to auto-archive the data on a hourly basis, daily
basis, weekly basis.

The fundamental flaw in most of the current commercial IDS packages
available is how and what to do with all the data that is collected.
Re-architecting of the schema may help, but also introduces other issues
as well.

/m

 On Fri, 1 Jun 2001, Chan Kien Eng wrote:

>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
> [EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
> ----------------------------------------------------------------------------
>
> Yes,
> Its 2GB now.
>
> ----- Original Message -----
> From: "Brian Tan" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, May 31, 2001 1:52 PM
> Subject: MSDE 8 in RealSecure 6.0
>
>
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
> [EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any
> problems!
> ----------------------------------------------------------------------------
>
> Hi...
>    Does it mean that with this new database,there's no longer the limitation
> of 1MB??
>
> Cheers
> ___________________________________________________________________________
> Visit http://www.visto.com/info, your free web-based communications center.
> Visto.com. Life on the Dot.
>
>
>
>
>
>
>



Reply via email to