We have a 100 IDS network working with ossim and It's
work ok.
It has a very low rate in false alarms. Forensic, of
course, still manually.
We run it over debian, but it works in any linux
distribution.
It has too vulnerabilty periodic scanning,
vulnerability metrics, security metrics, security
reports and trouble-ticket tool.
For us, ossim is marvellous. Well operated, of
course.
Adolfo Ranero Serrano
Security Admin
Telefonica Empresas
Spain
______________________________________________
Renovamos el Correo Yahoo!
Nuevos servicios, más seguridad
http://correo.yahoo.es
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------