Fw: Promiscuous vs Inline IDS

From: Mustapha Huneyd <mhbengal(at)yahoo.com>
Date: Wed Apr 30 2003 - 08:40:37 EDT

I was wondering if there are tests conducted to show traffic (bottleneck) patterns for both INLINE & Promiscuous IDS. Also are there tests that highlight differences or similarities in capture patterns for both kinds of IDS? Basically I want to know if an Inline IDS would create a bottleneck in a Fast ethernet / GE network?.

For e.g. SNORT inline vs ISS Realsecure or Cisco IDS

Mustapha

---

Can you respond to attacks based on attack type, severity, source IP, destination IP, number of times attacked, or the time of day an attack occurs? No?
No wonder why you're swamped with false positives! Download a free 15-day trial of Border Guard and watch your false positives disappear.

http://www.securityfocus.com/StillSecure-focus-ids2

---

Received on Sun May 4 03:13:18 2003