[Snort-users] snortsam/snort-inline/guardian

Frank Knobbe frank at ...9761...
Mon Mar 28 13:40:26 EST 2005


On Mon, 2005-03-28 at 09:46 -0500, Jeff Heckart wrote:
> I am trying to decide on snortsam/snort-inline/guardian for real time
> blocking.
> What should I try here?


Seeing how these three are all different, why don't you try them all?

Snort-inline: Blocks traffic inline like an IPS.

Guardian: A script running on Snort sensor that reactively blocks on a
couple firewalls.

Snortsam: A distributed version of Guardian where Snort Sensors
reactively block on a variety of firewalls.

You probably want to check them all out and render your own opinion
about these.

Cheers,
Frank

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20050328/1241f1b6/attachment.sig>


More information about the Snort-users mailing list