At 12:51 PM 8/4/00 -0400, Paul D. Robertson wrote:
>On Fri, 4 Aug 2000 [EMAIL PROTECTED] wrote:
>
> > The only way an IDS product can be selected as the best IDS vendor/system
>
>Just like firewalls, the only time "Best" works is with a [HINT] humorous
>posting.
> > 1. It is commercially available not in research/development state
>
>One could argue that tools like Echelon, which have had decades of
>development are ahead of the curve, even if they're searching for a
>different class of intrusion ;) Also, not everything is commercial :)
Absolutely correct, not everything is commercial, but when you are on the
other side of the fence recommending product, organizations kind of frown
when you recommend not yet commercially available software
> > 3. Real companies are drooling over it, not some pie in the sky dreamt up
> > stuff, that may or may not work in a real environment.
>
>Real companies drool over lots of useless stuff.
Absolutely agree, real companies drools over lots of useless stuff, and my
last company drooled over a time tracking system that was overly expensive
and forthing with vapor features, the vendor kept on promising, oh yeah
next release. I just heard the time tracking software just got tossed out..
> > 4. It is produced by a real company that is self-funded or VC funded and
> > one has a real mailing address not some Mailboxes US address somewhere
> > (although those are fun to have if you hiding out from the law or
> > something, but that is another post or story to post)
>
>Once again, not everything software need be commercial for it to be well
>done or good.
Correct, as long as the software is well done, and does not crash as
frequently as Windows does. Getting a blue screen of death after
installing firewall software is not a good sign.. :)
> > 5. Magazines actually can be sent eval copies of the software/hardware and
> > actually write some critique about it, not having this, or having this, or
> > can't do packet dis-assembly, etc.
>
>Sorry, you're *honestly* saying there's value to magazine reviews??????
Some magzines have value. Because CIO's read them, after they drool and
froth at the mouth, they sometimes shoot an email message off to IT or
Security, to get that vendor in so that they can hear the Snake Oil schpeal.
/m
>Paul
>-----------------------------------------------------------------------------
>Paul D. Robertson "My statements in this message are personal opinions
>[EMAIL PROTECTED] which may have no basis whatsoever in fact."
> PSB#9280
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]