On 9/13/2010 7:19 PM, Mike Patterson wrote: > If you're not budgeting for an FTE to read logs and update/tune rules
agreed. budget for what you want your IDS to do.. what business function it will fullfill (checkmark on a compliance test, actual security control, network early-warning system.. etc) and THEN decide on the technology. if you know what you want the IDS *for* you shouldn't even be asking which one to use.. your use requirements will fairly closely dictate which product you're going to buy. _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
