HIDS / Cisco MARS / Snare

[Hank Eggers]

We are in the process of evaluating the Cisco MARS product - http://www.cisco.com/en/US/products/ps6241/index.html

They recommend using the InterSect Alliance Snare agent for sending syslog info to the appliance for Windows/SUN/Linux servers. However there is no Snare agent for HPUX.

Could someone tell me if the HIDS product would attain the same result.

Also, has anyone successfully integrated HIDS with the MARS product?

I'm not looking to be a beta tester but if someone has some positive feedback on using HIDS with MARS, I might take a peek.

Thanks in advance.

[Hank Eggers]

btt