John, Thank you for your quick reply. Basically I have a customer the posed the following questions. I know that his answer is PAM. But I am not sure about the modeling capabilities he is asking about. IS there any security product where you can model the behavior of the application-layer protocols.
****************************** Do ISS sensor rules have built-in layer-7 protocol (and protocol payload) modeling capabilities? If yes, models for which application-layer protocols are available from ISS (or third parties) and at which cost? ******************************** -----Original Message----- From: John Taylor [mailto:[EMAIL PROTECTED] Sent: Monday, December 08, 2003 5:32 PM To: Wassim Nakadi Subject: RE: [ISSForum] Network Sensor Importance: High Wassim, the PAM module is a sealed component as such, PAM was developed by the same people who wrote the Expert Sniffer so they probably know more about protocol analysis than anyone in the World! What is important in any analysis is the interpretation based upon all factors rather than just a decode! What are you tring to identify specifically Wassim?? JT -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Wassim Nakadi Sent: 08 December 2003 14:16 To: ISSforum (E-Mail) Subject: [ISSForum] Network Sensor Does anyone have some detailed information on layer-7 protocol and payload inspection capabilities of ISS network sensor. I know that through PAM the sensor can perform protocol analysis. But does anyone have any detailed technical information about this. Regards, WN _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo -- Been hit with MS-Blaster? Spend too much time patching systems? Behind with your Security Patching? Click below -- there is another way! http://www.tolerant.com/virtualpatch.pdf This electronic message contains information from Tolerant Systems, which may be privileged or confidential. The information is intended for use only by the individual's) or entity named above. Be aware that any disclosure, copying, distribution or use of the contents of this information is strictly prohibited. If you have received this electronic message in error, please notify me by telephone or email (to the number or email address above)immediately. _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
