4 ms·
Turn this into a small appliance I don't have to manage and take my money. Send me alerts via Slack and ask me to confirm suggested corrective actions.
by rrggrr 10y ago
Turn this into a small appliance I don't have to manage and take my money. Send me alerts via Slack and ask me to confirm suggested corrective actions.
- 616c 10y agoI see you got downvoted, but the reason someone wants something for free: many powerful expensive appliances exist. But if someone needs to stand something up quickly and effective for an investigation or frequent analysis, that gets expensive. I am sure other people with Cisco Sourcefire and competitors will agree here.
- rrggrr 10y agoOkay. For those down voters this... for those of us without the time, skills and money for expensive solutions or free solutions a Reasonably Priced appliance would really, really be great. That market is pretty much everyone with an internet connection who conducts business or confidential communications online.
- detaro 10y agoTons of SMB router vendors include basic IDS features, often under the label "UTM", with some sort of basic rule set aimed against malware. If you want something better, hands-off doesn't work that well, you have to tune it to your network, because otherwise you'll drown in alerts for mundane things or leave a lot of potential on the table. (E.g. in an insurance office remote management connections or IRC are probably are worth an alert. In a dev shop these might happen all the time. Or not, depending on setup and policies)