Get/write something that will monitor the syslog logs for unusual activity, and then pass it out to SMS, SMTP, or whatever you want....
-----Original Message----- From: Mathieu Patenaude [mailto:[EMAIL PROTECTED]] Sent: 05 February 2002 15:47 To: [EMAIL PROTECTED] Subject: IDS for Pix Firewall Do you know of a free or cheap IDS solution for the Cisco Pix Firewall. I don't want to buy their hardware IDS ($$$$). I think that Syslog Server is not enough. I need something that can identify the attacks and that can send emails Mathieu P.S. What do you think of www1.dshield.org... is it a good source --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.320 / Virus Database: 179 - Release Date: 30/01/02 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.320 / Virus Database: 179 - Release Date: 30/01/02
