Re: OT: opinions on IDS / IPS solutions

[Laurens Vets]

<interesting & spot on remarks>

Just don't get ISS crap.

Also, snort is good, but you must know what you're doing.  Our snort box,
running on an old throw away box, and only capturing/analyzing 10 minutes of
every hour, is giving us *MORE* useful data than half a mil worth of ISS
crap.

Care to elaborate? :)

<more interesting information>

Thanks!