HP IDS/9000

[someone_4]

Hello,
I was wondering if anyone is using IDS/9000. I am going to try to install it but I am missing a bunch of patches / java and HPUX patches. I just want to know if it is a good tool and if it is worth all the trouble.

Richard

[Michael Tully · Accepted solution]

Hi Richard,

These posts provide some good, bad and not so terribly ugly.... I think that the answer is try yourself and see. I have and I don't think it worth it unless you've got the 2.1 version and intend to only use on systems on the outside of your firewall.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xaae0ff77de2bd611abd50090277a778c,00.html

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xee7b1cc6003bd6118fff0090279cd0f9,00.html

Cheers
-Michael

[Craig Rants]

Richard,
I have tested both versions on one of my HPUX systems. I have to say, it does what they say it does. That being said, to me what it does is hardly useful at this point. My experience with IDS systems tells me that this product is not yet mature, there are a lot of IDS functions that this product needs to add before I would count on it.

On the other hand, I would use the IPF/9000 product... Just my commentary

C