RE: Snort n' ISA2K4

  • From: Marvin Cummings <marvinc@xxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 24 Nov 2004 14:40:36 -0500

Hmm...cool. Currently no dmz here. I'm looking, well trying to follow
the snort security guide for w2k3 and I'm wondering if a dmz would be
needed for this type of setup? This is a small shop with no special
servers or services running. They seem to want to make use of this sun
box and not totally give in to microsoft. So I'm thinking a snort,
acid, etc setup would suffice.
Are you managing bandwidth from snort, ISA or both? 

thanks

On Wed, 24 Nov 2004 11:24:44 -0800, josephk <josephk@xxxxxxxxx> wrote:
> http://www.ISAserver.org
> 
> Hi Marvin,
> 
> I have snort on a sun machine that runs in my honeypot dmz. It works
> quit well.
> I would suggest that you add a 10/100 NIC to the sun machine. I'm just
> using some
> Sparcserver 5's for the honeypot dmz.
> 
> Joseph
> 
> 
> 
> -----Original Message-----
> From: Marvin Cummings [mailto:marvinc@xxxxxxxxx]
> Sent: Wednesday, November 24, 2004 9:27 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Snort n' ISA2K4
> 
> http://www.ISAserver.org
> 
> Would anyone have any reservations with installing snort on an ISA
> server? I'm looking for an additional monitoring solution for a network
> and snort was mentioned when I mentioned ISA2K4. Snort would be
> installed on either the ISA server or a sun workstation. I've yet to use
> snort in this manner so I'm interested in suggestions.
> 
> tia
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com No.1 Exchange
> Server Resource Site: http://www.msexchange.org Windows Security
> Resource Site: http://www.windowsecurity.com/ Network Security Library:
> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> josephk@xxxxxxxxxxxxxxxxx To unsubscribe visit
> 
> 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as: 
> marvinc@xxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>


Other related posts: