IPS Recommendations

Eric "Shubes" plug at shubes.net
Mon Oct 9 12:25:45 MST 2006


Micah Abrams wrote:
> I'm looking for suggestions for a decent and affordable IPS system for a
> small network.  The network has about 5 servers connected to a managed
> switch sitting behind a pix firewall (506).  Something that works with the
> pix would be ideal, but we are not apposed to replacing the pix altogether.
> We have tried snort with snortsam but have had a few problems and would like
> a more finished supported product if possible.  The entire network is
> running Redhat Linux.
> 
> The main goal of this project is to automatically block port scans and other
> suspicious traffic at the firewall level.
> 
> Thanks in advance,
> 
> Micah
> 
Have you looked at IPCop.org? I've loaded it up on some old (formerly
retired) emachines and it works nicely. Admin is entirely web based, so it's
simple to use.

-- 
-Eric 'shubes'


More information about the PLUG-discuss mailing list