Posted by arlene

Literally hundreds of vendors offer various forms of commercial IDS implementations. The most q effective solutions combine network- and host-based IDS implementations. Likewise, most such implementations are primarily signature-based, with only limited anomaly based detection capabilities present in certain specific products or solutions. Finally, most modern IDSes include some limited automatic response capabilities, but these usually concentrate on automated traffic filtering, blocking, or disconnects as a last resort. Although some systems claim to be able to launch counterstrikes against attacks, best practices indicate that automated identification and backtrace facilities are the most useful aspects that such facilities provide and are therefore those most likely to be used.

A huge number of potential vendors can provide IDS and IPS products to companies and organizations. Without specifically endorsing any particular vendor, the following products offer some of the most widely used and best-known solutions in this product space:

• Cisco Systems is best known for its switches and routers, but offers significant firewall and intrusion detection products as well (www.cisco.com).
• GFI LANguard is a family of monitoring, scanning, and file integrity check products that
  offer broad intrusion detection and response capabilities (www.gfi.com/languard/).
• Internet Security Systems (ISS) offers a family of enterprise-class security products called RealSecure, that includes comprehensive intrusion detection and response capabilities (www.iss.net).
• McAfee offers the IntruShield IPS systems that can handle gigabit speeds and greater (www.mcafee.corn).
• Sourcefireis the best known vendor of open source IDS software as they are the developers of Snort, which is an open source IDS application that can be run on Windows or Linux systems (www.snort.org).

A clearinghouse for ISPs known as ISP-Planet offers all kinds of interesting information online about MSSPs, plus related firewall, VPN, intrusion detection, security monitoring, antivirus, and other security services. For more information, visit any or all of the following URLs:

• ISP-Planet Survey: Managed Security Service Providers, participating provider’s chart, www.isp-planet.com/technology/mssp/participants_chart.html.
• Managed firewall services chart, www.isp-planet.com/technology/mssp/firewalls_chart.html.
• Managed virtual private networking chart, www.isp-planet.com/technology/mssp/services_chart.html.

• Managed intrusion detection and security monitoring, www.isp-planet.com/technology/mssp/monitoring_chart.html.
• Managed antivirus and managed content filtering and URL blocking, www.isp-planet.com/technology/mssp/mssp_survey2.html.
• Managed vulnerability assessment and emergency response and forensics, www.isp-planet.com/technology/mssp/mssp_survey3.html.

Possibly related posts: (automatically generated)
Popular Commercial IDS Systems

• Email Usage Constrains
• The HTML versus Text Format Decision
• The Apache Web server, a rich Java Web site continue...
• The influence of the Internet and the electronic commerce continue...
• Basic Computer Security
• The Apache Web server, a rich Java Web site
• Coded Data Cryptographic Systems Software
• HTML Coding for different E-mail Reader Platforms
• Internet Security, Public Key Encryption and Digital Certificates
• Website Hosting Sever, some Pitfalls you need to avoid part 2