Looking for IDS

[jrogerom]

Hi, I need to be PCI compliant and I need an IDS.
I have heard about SNORT but is there any other brand that anybody recommends according of their experience?
Thanks in advance for your help.

 

[tfg13]

As far as IDS's go, I've dealt with ISS RealSecure/Proventia, Niksun NetDetector, McAfee products, Securify, Sourcefire, and Snort (the free product from Sourcefire). Of them all, Snort by far is the easiest to configure, has a lot more signatures (easy to write them too), and it's free! Just need a good sized server/PC (depending on the amount of traffic it will look at) to run it.

 

[Grenage]

Snort is an excellent IDS, it really is.

"We can categorically state that we have not released man-eating badgers into the area" - Major Mike Shearer

 

[tjbradford]

cisco do one called mars , it's an appliance that offers hugh amounts of info on your lan.

worth a look