frank at ...9761...
Mon Mar 28 13:40:26 EST 2005
On Mon, 2005-03-28 at 09:46 -0500, Jeff Heckart wrote:
> I am trying to decide on snortsam/snort-inline/guardian for real time
> What should I try here?
Seeing how these three are all different, why don't you try them all?
Snort-inline: Blocks traffic inline like an IPS.
Guardian: A script running on Snort sensor that reactively blocks on a
Snortsam: A distributed version of Guardian where Snort Sensors
reactively block on a variety of firewalls.
You probably want to check them all out and render your own opinion
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 187 bytes
Desc: This is a digitally signed message part
More information about the Snort-users