At 09:51 AM 8/4/00 -0600, dreamwvr wrote:
>On Fri, 04 Aug 2000, [EMAIL PROTECTED] wrote:
> > The only way an IDS product can be selected as the best IDS vendor/system
> >
> > 2. It is actually a shipping product (some other IDS vendors have stated,
> > oh yeah we have it in a lab environment on x number of machines) Sorry,
> > doesn't count, it actually has to be a real live shipping product ( note:
> > does not have to shrink wrapped, shrink wrap just adds a few more cents to
> > the packaging, a nice little box with printed documentation/included on
> the
> > CD/ or both, License key driven or not..)
>oh so documentation on the big I isn't good enough? c'mon..
Actually according to some organizations, it is nice to have doc on-line,
but when installing and IDS or Firewall, it kinds of defeats the purpose of
rule #1 when installing security software, ensure that the device/host it
will be installed is not connected to the Internet. Oops, kind of bites
trying to read the HTML on the big I when the cable isn't connected.
> > 3. Real companies are drooling over it, not some pie in the sky dreamt up
> > stuff, that may or may not work in a real environment.
>depends what you consider a "real co" to be.. some time ago dot coms were not?
>does that mean they are not real co? dot coms deserve better respect actually
>IMHO. how real does it have to be? i would say that if it works on the I well
>enough that is real enough for me. actually that is what matters most IMHO.
dot coms are fine, real as in top notch security consulting service
companies don't chuckle when they go onsite, and they you have what, oh
yeah, I sort of heard of it, yeah, it does that and this fine, but it
really doesn't do this. BTW, if they are doing that, ask them to leave
politely because they really don't know what they are talking about.
BTW, a IT Director cannot be fired if they choose Cisco over some new to
the market IDS system.. So just be aware of that, even though Cisco IDS is
in desperate need of updating..
> >
>4. It is produced by a real company that is self-funded or VC funded
>and > one
>has a real mailing address not some Mailboxes US address somewhere >
>(although
>those are fun to have if you hiding out from the law or > something, but that
>is another post or story to post) >
>ok so they have to be bought off is that it by selling out to the highest
>bidder? VC can be good or can be really bad IMHO. hmmm... oh i see well
>IMHO there are a lot of co that decide to go it on their own.. its called
>independent..
Yes, independent only goes so far, very hard to scale if all of a sudden
one gets 2000 orders for your IDS system that is barely through QA.. :)
> 5. Magazines actually can be sent eval
>copies of the software/hardware and > actually write some critique about it,
>not having this, or having this, or > can't do packet dis-assembly, etc.
>i see so the trad rag mags need to eval it for it to be respectable huh?
>i disagree IMHO the big I is the opinion that counts.. and by that i mean
>those
>that would try a product by a little co with a wee little mascot .. or a tiny
>imp.. i remember for one trying to get Linux written about for days b4
>the linux mindrush. if Linux had waited for the trad rag mags to get it
>together well quite simply we would still be waiting. same with *BSD.
>from my experience trad mags are driven by paid advertisements aka
>ad victorials..
OK.. We are talking about IDS products, not operating systems, but point
well taken..
> > 6. Security consultants can moan/whine/bitch about it to the
>vendor or > their reseller, and whine and moan about it on some mailing list
>sure that is one of the greatest benefits of the I we can all discuss what we
>think about something.. diversity tends to do that.. which is a good thing
>since sometimes ones perspectives change:-))
Yes, this should be a major attraction to customers and users of an IDS
product. Support lists, user's bitch list, issforum, etc. Having a web
page is even better, I recall some very popular firewall company (great
product), never had a web page or email.. Was kind of interesting.. :)
> > 7. Your IDS product actually gains enough sales/revenue to be on some
> > IDC/Forest & Sullivan chart (currently Cisco, and ISS have a major
> piece of
> > the market, with others listed behind.
>I i C so unless a product is competing directly w CISC it isn't a product?
>again some of the greatest products were born on the I not behind some
>tall glass towers somewhere..
Again, I am speaking about IDS products, this market is a totally different
animal than most. I would agree that a majority of the Internet traffic
goes through a half dozen or so research projects that just become standard
de facto (i.e. sendmail, DNS, BIND, etc)
> > 8. Other vendors have actually heard about it and lob nasty grams saying
> > they have more signatures than x or y.
>hee..hee..hee AGREED!
Yes, this is very difficult one, because the definition of a signature
varies from IDS vendor to IDS vendor. Packet dis-assembly and re-assembly
is also one of those strange voodoo.. :)
> > 9. Companies have to either issue hopefully :) a large PO or check to get
> > into their security administrators grubby little hands.
Yes, this is a definite + sign inthe world of IDS. Revenue counts, Good
Tech support counts, enhancements greatly help,
/m
>..WELL YOU GOT ME THIS TIME;-))
>Touche
> > /m
> >
> >
> >
> > At 09:26 AM 8/4/00 -0600, dreamwvr wrote:
> > >hi,
> > > this was a attempt at "HUMOUR" since the thread was getting pretty
> dry..
> > >and conflictive. Anyhow it would be a good concept and many
> > >of the items i mentioned are definately needed. Well back to it..
> > >it could be considered still in R&&D ;-))
> > > Best Regards,
> > > [EMAIL PROTECTED]
> > >On Fri, 04 Aug 2000, Mark Teicher wrote:
> > > > Is BRAIN commercially available or is it still in the
> research/development
> > > > state??
> > > >
> > > > /m
> > > >
> > > > At 03:46 AM 8/4/00 -0600, dreamwvr wrote:
> > > > >hi,
> > > > > I would beg to differ but the best IDS and most scalable is the ..
> > > > >[B]inary [R]eflector [A]ntenna [I]nductor [N]etwork /device also
> > > > >known as the BRAIN. IMHO "The Best" often never gets beyond
> > > > >first base due to lack of time.. mostly. IDS systems need to
> > > > >be FLUID to change rather than WAITFUL not to be confused
> > > > >with STATEFUL (hi Chris) . If a IDS system is truly to be successful
> > > > >it needs most of all to not have to wait for UPGRADES that could have
> > > > >been supplied but simply were not for hidden reasons,SERVICE PACKs or
> > > > >whatever the vendor decides to call them. Every day i
> learn something i
> > > > >didn't
> > > > >know || (forgot) this needs to be inserted into the IDS system so it
> > > > >basically
> > > > >learns what you learn. IDS is in its infancy as well will see many
> > > > >changes. The
> > > > >addition of the trad security/alarm co/institution demand it so
> that they
> > > > >can leverage it. (albeit i find that sometimes instead of improving
> > > > >it actually takes a step back in time but mostly it forward.) Now
> > > > >moving along one takes one gigabyte cable and INSERT in ear..;-))
> > > > > Best Regards,
> > > > > [EMAIL PROTECTED]
> > > > >-
> > > > >[To unsubscribe, send mail to [EMAIL PROTECTED] with
> > > > >"unsubscribe firewalls" in the body of the message.]
> > >--
> > >Reuters, London, February 29, 1998:
> > >Scientists have announced discovering a meteorite which will strike the
> > >earth in March, 2028. Millions of UNIX coders expressed relief for being
> > >spared the UNIX epoch "crisis" of 2038.
> > >_______________________________________________________________________
> > >
> > >************** DREAMWVR.COM - TOTAL INTERNET SERVICES ****************
> > > TOTAL DESIGN - DEVELOPMENT - INTEGRATION - SECURITY - Click Here..
> > > <http://www.dreamwvr.com/services/MAX_SEC.html>;
> > > DREAMWVR.COM - The Console of Many... 90 Topics Covered
> > ><http://www.dreamwvr.com/dynamicduo.html>;
> > ><mailto:[EMAIL PROTECTED]>;
> > >->> LINUX Solution Provider and North American Distributor<<-
> > > "===0 PGP Key Available
> > >*************** "As Unique as the Company You Keep."*****************
> > > "If anyone speaks from DREAMWVR.COM its certainly not me:-)"
> > >________________________________________________________________________
>--
>Reuters, London, February 29, 1998:
>Scientists have announced discovering a meteorite which will strike the
>earth in March, 2028. Millions of UNIX coders expressed relief for being
>spared the UNIX epoch "crisis" of 2038.
>_______________________________________________________________________
>
>************** DREAMWVR.COM - TOTAL INTERNET SERVICES ****************
> TOTAL DESIGN - DEVELOPMENT - INTEGRATION - SECURITY - Click Here..
> <http://www.dreamwvr.com/services/MAX_SEC.html>;
> DREAMWVR.COM - The Console of Many... 90 Topics Covered
><http://www.dreamwvr.com/dynamicduo.html>;
><mailto:[EMAIL PROTECTED]>;
>->> LINUX Solution Provider and North American Distributor<<-
> "===0 PGP Key Available
>*************** "As Unique as the Company You Keep."*****************
> "If anyone speaks from DREAMWVR.COM its certainly not me:-)"
>________________________________________________________________________
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
