The only way an IDS product can be selected as the best IDS vendor/system
1. It is commercially available not in research/development state
2. It is actually a shipping product (some other IDS vendors have stated,
oh yeah we have it in a lab environment on x number of machines) Sorry,
doesn't count, it actually has to be a real live shipping product ( note:
does not have to shrink wrapped, shrink wrap just adds a few more cents to
the packaging, a nice little box with printed documentation/included on the
CD/ or both, License key driven or not..)
3. Real companies are drooling over it, not some pie in the sky dreamt up
stuff, that may or may not work in a real environment.
4. It is produced by a real company that is self-funded or VC funded and
one has a real mailing address not some Mailboxes US address somewhere
(although those are fun to have if you hiding out from the law or
something, but that is another post or story to post)
5. Magazines actually can be sent eval copies of the software/hardware and
actually write some critique about it, not having this, or having this, or
can't do packet dis-assembly, etc.
6. Security consultants can moan/whine/bitch about it to the vendor or
their reseller, and whine and moan about it on some mailing list
7. Your IDS product actually gains enough sales/revenue to be on some
IDC/Forest & Sullivan chart (currently Cisco, and ISS have a major piece of
the market, with others listed behind.
8. Other vendors have actually heard about it and lob nasty grams saying
they have more signatures than x or y.
9. Companies have to either issue hopefully a large PO or check to get into
their security administrators grubby little hands.
/m
At 03:46 AM 8/4/00 -0600, dreamwvr wrote:
>hi,
> I would beg to differ but the best IDS and most scalable is the ..
>[B]inary [R]eflector [A]ntenna [I]nductor [N]etwork /device also
>known as the BRAIN. IMHO "The Best" often never gets beyond
>first base due to lack of time.. mostly. IDS systems need to
>be FLUID to change rather than WAITFUL not to be confused
>with STATEFUL (hi Chris) . If a IDS system is truly to be successful
>it needs most of all to not have to wait for UPGRADES that could have
>been supplied but simply were not for hidden reasons,SERVICE PACKs or
>whatever the vendor decides to call them. Every day i learn something i
>didn't
>know || (forgot) this needs to be inserted into the IDS system so it
>basically
>learns what you learn. IDS is in its infancy as well will see many
>changes. The
>addition of the trad security/alarm co/institution demand it so that they
>can leverage it. (albeit i find that sometimes instead of improving
>it actually takes a step back in time but mostly it forward.) Now
>moving along one takes one gigabyte cable and INSERT in ear..;-))
> Best Regards,
> [EMAIL PROTECTED]
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
