This morning we have seen the webcast from SANS regarding OSSEC. We found it very interesting and it has clarified some of our issues. Other issues however still remain.
1) In the webcast, Mike Poor is talking about Setup, configure, or remove agents from remote machines. We can add and remove agents, and give them a key. But that's it. We would like to know if there is a way to configure the agents (edit the ossec.conf) from the ossec server?. 2) The agent-info (in queue) contains the agent host OS. Is there a way to add more information like free disk space, encryption running, SSL active etc. 3) We are very enthusiastic about OSSEC. Is there anyway we can contribute to the project ? Thanks, Ruurd Bakker SecQuard Systems Mob?? +31(0)6 5262 5365 Email [EMAIL PROTECTED] Web?? www.xsguard.nl
