Re: [Snort-inline-users] Does Sourcefire's IPS use snort-inline?

[Eric H. <eri...@ap...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

For a company whose founder created Snort, built appliances powered by
Snort, and put the effort in to integrating Snort-Inline in to the Snort
codebase, I would find it highly unlikely that they would use anything
but.. Especially since their appliances use Snort signatures.

Any Snort-based product company, such as Countersnipe, Sourcefire,
Demarc, even Applied Watch, any IPS capabilities announced by these
companies you can believe is most likely powered by Snort-Inline.
Especially if the solutions use Snort signatures.

The only other snort-based IPS that I am aware of other than
Snort-Inline is Hogwash, however, I'm not aware of any commercial
company that uses it. It would be interested to hear if anyone is
actually using it.

Side note, last I heard, the Hogwash project was dead but from what I
can see on the project page, it may be picking back up.

Best Regards,

Eric Hines, GCIA, CISSP
CEO, President, Chairman
Applied Watch Technologies, LLC


- ---------------------------------------------------
Eric Hines, GCIA, CISSP
CEO, President, Chairman
Applied Watch Technologies, LLC
- ---------------------------------------------------
Headquarters:		1095 Pingree Road
			Suite 213
			Crystal Lake, IL 60014

Virginia Office:	4524 Waverly Crossing Lane
(DoD/Intelligence)	Chantilly, Va. 20151 	
			TS/SCI Cleared Personnel
- ---------------------------------------------------
Web Site:		http://www.appliedwatch.com
Tel:			(877) 262-7593
Direct:			(877) 262-7593 ext:327
Cell:			(847) 456-6785
- ---------------------------------------------------
- -


Victor Julien wrote:
> On Saturday 05 November 2005 18:53, Richard Compton wrote:
> 
>>Sourcefire has their own line of IPSs that sit inline and block traffic. Do
>>these devices just use snort-inline or do they have some proprietary code
>>that they use for their IPS? Anybody have any experience w/ these IPSs?
> 
> 
> As far as i know they don't use Snort_inline...
> 
> Regards,
> Victor
> 
> 
> -------------------------------------------------------
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDbqt9obrbO5ZoXNARAv3jAJ9fiDuF0qdRusRTBjR7NbpZqBVGCQCg7bbB
Ff+u82n+X+XEom/t90f4P3k=
=UIzy
-----END PGP SIGNATURE-----