My experience before I upgraded to Server 2003 was: BlackIce Desktop Protection installed with Server 2000 and ISA 2000 on top of it ran fine. Yeah, a low cost *good* IDS would work fine under Server 2000 and ISA 2000. I know it wasn't the recommended usage for desktop protector, but actually it ran fine showing all attacks/intrusions.
Tried EagleX (snort with web front-end) also on 2003 server with ISA and it runs fine too, but couldn't seem to recognize things like a Blaster packet. Hats off to ISS for great products! Guess I'll need to shell out some money for the server sensor and workgroup manager. :) Anyway, thanks for your response! ======================================= Brian Kirby KirbyKomputing [EMAIL PROTECTED] -----Original Message----- From: Andrew Plato [mailto:[EMAIL PROTECTED] Sent: Monday, March 08, 2004 8:46 PM To: Brian Kirby; [EMAIL PROTECTED] Subject: RE: [ISSForum] What ISS IDS product will run on Server 2003? RS Server Sensor actually has a specalized version for ICA server. But it definitely isn't lower priced than BlackICE. Its about $1500 more! You said BlackICE "hates it." How so? I mean, it wasn't designed to handle a proxy server on 2003, but there might be some tweaks you can do to make it happier. ___________________________________ Andrew Plato, CISSP President/Principal Consultant Anitian Enterprise Security -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Kirby Sent: March 05, 2004 12:39 PM To: [EMAIL PROTECTED] Subject: [ISSForum] What ISS IDS product will run on Server 2003? I have a Windows Server 2003 running ISA on it. What ISS IDS products will be compatible with this version? BlackIce seems to hate it as I was looking for a lower priced IDS. Anybody run into this? Thanks! Brian Kirby KirbyKomputing email: [EMAIL PROTECTED] www.kirbykomputing.com _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
