Having installed and worked with both products, I think that Cisco's
offering is more comprehensive, but Snort is highly reliable and much
cheaper.
It doesn't have some of the features of the Cisco product (dynamic
shunning), but for most small to medium sized businesses (like the kind I
work wi
Backing up what Craig said, Snort is probably better performing in
terms of cost/performance than almost all the IDSes out there,
including Cisco. It does not have a end to end solution to make
one's life easier though, at least not out of the box.
Of course, you will need some sort of a unix
Thanks for all the replies. It's very helpful to get a feel for the
differences. To quickly synthesize what I've read, I would say that Cisco's
IDS is an enterprise, end-to-end solution, with improving reliability and
ease-of-use. Snort, on the other hand, is more appropriate for the midsize
or sma
There is a windows port of Snort, but I've never used it, so I can't tell
you much about it from personal experience.
Those I know who've tried it usually recommend sticking with Unix.
Your mileage may vary, but you might have an easier time getting snort
running on FreeBSD since there's a very
ct: RE: OT Re: Snort versus Cisco IDS [7:62939]
Thanks for all the replies. It's very helpful to get a feel for the
differences. To quickly synthesize what I've read, I would say that Cisco's
IDS is an enterprise, end-to-end solution, with improving reliability and
ease-of-use
runs on windoze as well.
http://www.silicondefense.com/techsupport/winsnortacid-iis_1.9.0.htm
regards,
/vicky
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 13, 2003 9:20 AM
To: [EMAIL PROTECTED]
Subject: RE: OT Re: Snort versus
I've been having trouble with Snort on Red Hat and I've searched high and
low and can't find a resolution. My alert file grows to 2GB very quickly and
then crashes the process. I've seen one or two mentions of this same issue
in NG searches but haven't found a resolution. So like someone already sa
IL PROTECTED]]
Sent: Thursday, February 13, 2003 12:20 PM
To: [EMAIL PROTECTED]
Subject: RE: OT Re: Snort versus Cisco IDS [7:62939]
Thanks for all the replies. It's very helpful to get a feel for the
differences. To quickly synthesize what I've read, I would say that
Cisco's
IDS is
I've also had trouble with RedHat...with Snort as well as other apps. I
switched to FreeBSD and have been very pleased so far.
At 06:32 PM 2/13/2003 +, you wrote:
>I've been having trouble with Snort on Red Hat and I've searched high and
>low and can't find a resolution. My alert file grows
> I've also had trouble with RedHat...with Snort as well as other apps. I
> switched to FreeBSD and have been very pleased so far.
Interesting... I'll give that a try... thanks mate!
JR
--
Johnny Routin
)?)
-
""Craig Columbus"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PRO
10 matches
Mail list logo
