[Snort-users] Request Opinions on HIDS as a backup to Snort

J. Craig Woods drjung at ...2066...
Wed Mar 27 12:33:54 EST 2002


"Sean T. Ballard" wrote:
> 
> Tripwire is a great HIDS www.tripwire.org
> 

I would ditto this info. For my setup I run a gateway/router box with
*tight* firewall rules. I have snort sensor watching the packets that
try to enter the LAN, and, as backup security, I have tripwire
monitoring every important file on the gateway/router box.

-- 
J. Craig Woods
UNIX/NT Network/System Administration

-Art is the illusion of spontaneity-




More information about the Snort-users mailing list