[Snort-users] Re.: Snort Sensor Placement Outside Firewall
michaels at ...9077...
Thu Jun 26 07:25:05 EDT 2003
Thanks for the acknowledgements :)
Even though companies sell commercial sensors and they have great support,
they don't know everything, and it is a very good idea to seek alternative
answers elsewhere, like in the snort-users forum. That list has a wealth of
knowledge behind it and should be utilized whenever possible.
You took the incentive to go outside the box and seek other alternatives and
my hat goes off to you, most would have settled with the canned answer from
the support department.
System Engineer / Security Support Technician
mailto:michaels at ...9077...
Snort: Open Source Network IDS - http://www.snort.org
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Rich Lichvar
Sent: Thursday, June 26, 2003 6:11 AM
To: Snort Users List (E-mail)
Subject: [Snort-users] Re.: Snort Sensor Placement Outside Firewall
We decided to dump the idea for now. Given the massive amount of data that
would be collected and the lack of time to analyze it, this seems to be the
best path for us (and probably a bad idea anyway).
BTW, many thanks to Michael Steele of Silicon Defense. We're using the
Silicon Defense Sentrus boxes and are, on the whole, quite happy with them.
(Any problems we've had have been ours, not theirs.) Michael has been a
great help to us in getting our Sentrus boxes and Snort running on them,
back up to snuff.
Richard L. Lichvar
Knowledge Resource Center, Inc.
Phone: 703-848-2100 x228
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
More information about the Snort-users