> ----- Original Message -----
> From: zack .
whickerman @
usa .
net [SMTP:zack .
whickerman @
usa .
net]
> Sent: Monday, December 15, 1997, 0:05:48
> To: Stout, William
> Subject: NetRanger vs. CyberCop
>
>
> Greetings Firewallers! I've seen much discussion lately
> on here regarding intrusion and thought I would ask for
> comments on some issues I am looking into.
>
> I am in the process of evaluating NetRanger and CyberCop
> and would like to hear if anyone else has done a comparison. When
Really? Just a month ago I had my hands on a pre-beta CyberCop sensor
(Solaris X86/266MHz Pentium II/ fast-ethernet box). You can't get a
CyberCop system just yet.
Both the CyberCop and NetRanger products use Wheelgroup IDS software, so
there should not be any core difference as far as the sensor software.
CyberCop sensors do not yet have an adapter for every media though.
Network General...Umm...Network Associates is good at protocols and
interfaces though, so they'll eventually have 'everything'.
NetRanger can give feedback to a NetSentry 'security' router for dynamic
rules.
Wheelgroups' background in Airforce InfoWar is good for marketing,
though not everything military is directly useful in civilian life.
Besides, they're ex-Flyboys, and I'm an Ex-Army guy that did COMSEC for
global-SCIF communications (and you thought it was all air-gap security
;-) ). I would be interested in a comparison of IDS sensor software
system techniques, configurability and performance (ISS, NFR,
Wheelgroup).
Bill Stout
|
|
