FW: [ISSForum] Wireless LAN IDS

[Gilliland, Gill]

Title: Message

Our experience with using Internet Scanner to find these has not been too successful. As I understand this, the scanner relies on the AP running SNMP, and you have to provide Internet Scanner the correct community string.   These conditions are not likely to be met in a rogue AP.

 

The checks are worth running, but don't expect to find all your AP's!

 

I for one would like to see Internet Scanner detection of AP's improved!

 

 

-----Original Message-----
From: Anderson, Mike [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 20, 2002 4:54 PM
To: 'Heald, Arian'
Cc: '[EMAIL PROTECTED]'
Subject: RE: [ISSForum] Wireless LAN IDS

I would recommend using Wireless Scanner from ISS if you want to use an ISS product to detect rogue WAPs.

 

I do believe Internet Scanner/System Scanner as well as RS Network Sensor do have checks for it as well.

-----Original Message-----
From: Heald, Arian [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 20, 2002 11:00 AM
To: [EMAIL PROTECTED]
Subject: [ISSForum] Wireless LAN IDS

Hello to the Group;

I am relatively new to ISS and have been reading the posts for some time now.  I recently attended an update at New England ISSA, and came away wondering how I might utilize ISS to monitor and/or detect rogue wireless networks.  I'm presuming that the network sensors would be the most likely candidates for this type of thing.  Does anyone have some information I might use?

TIA

Arian Eigen Heald
Network Engineering
Investors Bank & Trust
[EMAIL PROTECTED]
617-330-6377

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 19, 2002 5:22 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: [ISSForum] INTRUSION DETECTION vs INTRUSION PREVENTION

My company is looking into intrusion prevention instead of ISS IDS. Does
ISS have any plan to fully incorporate intrusion prevention into their
architecture?
We are currently looking into two companies --- OKENA.COM and FORESCOUT.COM
Any thoughts on those two companies?

Thanks
Osaro Osagie
CCSA, CCNA, CISSP
ALLTEL Information Technology

_______________________________________________
ISSForum mailing list
[EMAIL PROTECTED]

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo



**************************************************************************
This message and any attached documents contain information
which may be confidential, subject to privilege or exempt from
disclosure under applicable law. These materials are solely for
the use of the intended recipient. If you are not the intended
recipient of this transmission, you are hereby notified that any
distribution, disclosure, printing, copying, storage, modification
or the taking of any action in reliance upon this transmission is
strictly prohibited. Delivery of this message to any person other
than the intended recipient shall not compromise or waive
such confidentiality, privilege or exemption from disclosure as
to this communication.

If you have received this communication in error, please notify
the sender immediately and delete this message from your system.
*****************************************************************************


*****

"The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential, proprietary, and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from all computers."