HP Intrusion Detection s/w

[Michael Campbell]

Folks

Does anyone know of any good INtrusion Detection software that runs on HP-UX 11.0 or what would be the best way of going about monitoring unauthorised access?

Any Help Appreciated

Michael

[Paula J Frazer-Campbell]

Hi

Cops and Tripwire are both good.


HTH
Paula

[Stefan Farrelly · Accepted solution]

Not an easy task. We use 4 things;

1. B6834AA B.01.00 HP-UX Security Patch Check Tool

We run it daily, it makes a realtime connection to HP to check for any new security patches and if there are new ones we download and install. This way we keep as uptodate as possible against any security vunerabilities on our servers.

2. run a lastb report daily checking for bad logins. Investigate any.

3. Subscribe to HP security bulletins via the itrc.hp.com as some things to watch out for are not necessarily available as patches in 1. above.

4. Run a trusted system.

Sometimes we run a password cracker to check for easily guessable passwords but with a trusted system and strict rules on password lengths etc. its not really needed.

[Rainer von Bongartz]

Download and install IDS/9000 from www.software.hp.com and you'll have everthing you want.

Regards
Rainer

[U.SivaKumar_2]

Hi,
How about trying IDS/9000 which is free from HP. it is a host based IDS.

http://www.software.hp.com/ISS_products_list.html

regards,
U.SivaKumar