TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Chris, site protector is really exciting, its eventual capabilities are going to totally change the way we use IDS and many other security tools. Like all new systems it has been released so that people can get used to it and decide how they will use it in future. To my limited knowledge the facilities that it does not yet have complete are:- Reporting Management of Desktop protector and other former Network ICE systems Full fusion correlation of events from all products Full Install Manager These will be incorporate over planned releases, it does have the fusion and correlation for Networlk Sensor and Server Sensor and I believe, not sure, Internet Scanner management. There are some great features that were taken from the ICECap Manager such as event addition, Workgroup Manager displays events sequentially, Site Protector like ICECap manger displays these based on serial, ie if we had 20 incidents of HTTP port probe at the same device this will be displayed as one event with 20 instances! I would recommend any Realsecure user to test and get used to Site Protector, even just in a lab environment, there are so many developments going on for the product it will be invaluable in the future. If I was running a system where I was not bothered about detailed reports I would certainly use it. John
