Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



IDS: RE: Intrusion Prevention

RE: Intrusion Prevention

From: Adam Powers <apowers_at_lancope.com>
Date: Tue, 10 Dec 2002 11:16:57 -0500

>From what I understand of the technology, they only accommodate external
threats. They don't provide protection against internal -> internal or
internal -> external threats. Perhaps someone from Forescout could
comment on this "limitation".

Additionally, to say "100% accuracy" implies that they properly
interpret 100% of the attacks (100% "precision" as another poster
explained it). Unlikely.

-----Original Message-----
From: Paul Wayne Brager Jr [mailto:shonuff_at_houston.rr.com]
Sent: Monday, December 09, 2002 1:25 AM
To: intrusi0n_at_cox.net; focus-ids_at_securityfocus.com
Subject: Re: Intrusion Prevention

There's no such thing as no "false positives"...they smokin crack
----- Original Message -----
From: <intrusi0n_at_cox.net>
To: <focus-ids_at_securityfocus.com>
Sent: Thursday, December 05, 2002 9:12 PM
Subject: Intrusion Prevention

> Hello everyone,
>
> Has anyone here seen or used ActiveScout, by ForeScout technologies?
It
claims to have a 100% accuracy , no false positives. I am rather
skeptical,
but I was wondering if anyone here has any expertise using or evaluating
this.
>
> Any input is greatly appreciated!
>
> ()()()()()
>
Received on Dec 10 2002

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos