Intrusion Detection systems

leeym

Member
Nov 21, 2003
100
0
0
Can someone recommend a solid IDS software package other than SNORT for a Windows environment?

Thanks
 

leeym

Member
Nov 21, 2003
100
0
0
For example, how does SNORT compare to Symantec Client Security 2.0?

I guess my main concern is if SNORT covers all the main ISD issues, or is it best to complement it with other ISD freeware?

Thanks
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Other than snort?
Dragon (unix only last time I checked)
ISS Real Secure (can't this use snort these days?)
Cisco Netranger(what is it called now?)
prelude-ids (uses snort rules)

They all suck to varying degrees.

Quick google search: Computer Associate International's eTrust, Cisco Systems' Secure IDS, CyberSafe Corp.'s Centrax, Enterasys Networks' Dragon, Internet Security Systems' BlackICE ISS' RealSecure, Intrusion.com's SecureNet Pro, NFR Security's NFR Network Intrusion Detection System, Anzen Computing's Flight Jacket, open-source Snort, Symantec Corp.'s NetProwler.