Intrusion Detection recommendations

Fri Feb 13 20:02:12 UTC 2015

JO,

IDS to meet PCI or HIPAA requirements is "regulatory grade". It meets specific notification and logging requirements. SNORT-based systems fall into this category. 

 -mel beckman

> On Feb 13, 2015, at 10:00 AM, "J. Oquendo" <joquendo at e-fensive.net> wrote:
> 
>> On Fri, 13 Feb 2015, Mel Beckman wrote:
>> 
>> Unless you need regulatory-grade IDS, your best bet is a Unified Threat Management (UTM) appliance, essentially any modern enterprise grade firewall such as a Cisco ASA, Fortigate, SonicWall, etc. These all have built-in IDS/IPS options for a fee.
>> 
>> -mel
> 
> With all due respect, is regulatory-grade IDS the same as
> say "military-grade" encryption? 
> 
> -- 
> =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
> J. Oquendo
> SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM
> 
> "Where ignorance is our master, there is no possibility of
> real peace" - Dalai Lama
> 
> 0B23 595C F07C 6092 8AEB  074B FC83 7AF5 9D8A 4463
> https://pgp.mit.edu/pks/lookup?op=get&search=0xFC837AF59D8A4463