TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
(Note to moderator: Please indulge my pseudo-rant) I don't like to buy-in to this discussion, as I have not yet had a chance to play with Dragon, however.. (and I would like to state that I am completely vendor-neutral) A few home-truths that ISS could benefit from: Several Years ago the ISS product range was IMHO "Best of Breed", as was their support. Recently (ie within the last 6-9 months), there appears to have been instability creeping into the product range, and "issues" with the quality of the support. My point is that,(like betamax): There is more to a product than just it's merits. When you adopt a particular product, you are making a business partnership with the company. I have (and will) continue to recommend ISS products to my clients in the hope that these issues are temporary, and in the belief that the direction (i.e. the incorporation of snort signatures - and moving away from the black-box - (auto gearbox) mentality of the past) is aligned with future trends. A mistake that could be made here is in thinking that most of the IDS product users were not intimately familiar with the environments In the same way that you would not ask a corner butcher to perform open-heart surgery:(although this has happened in the distant past), those not familiar with the intricacies and oddities of TCP/IP should probably steer clear of IDS rule management/creation. To further continue the analogy (auto vs manual): If the vehicle breaks or starts making a weird noise - you have to ask these questions: 1) What is wrong? 2) How quickly can it be fixed? 3) How much will it Cost? Invariably the manual wins more often than not - The reason : The KISS rule (simplicity). Kind Regards, Clinton Smith Information Security W.A.
