Recommendation Needed on Host Based Intrusion Detection

scheikhnajib — Sun, 10 Mar 2019 09:51:50 GMT

Hi,

I don't have any experience in selecting or implementing a host based intrusion detection package.

I need a package to sit on a web server (Win 2k / 2003 with IIS), running some e-Commerce websites, and I need to make sure that this package can detect and/or block any attempt to manipulate the scripts or web pages. If it's possible, I want to make sure that only certain IP addresses are allowed to carry out changes for this web service.

Can Cisco Security Agent fullfil my requirements? What is the licensing scheme if I wanted to deploy this on multiple servers? And do I have to get any central management station for these servers (any CiscoWorks platform for instance) or I can manage them individually?

Any comment or recommendation would be highly appreciated.

Thanks alot.

Salem.

Re: Recommendation Needed on Host Based Intrusion Detection

tsteger1 — Thu, 26 Jan 2006 21:46:51 GMT

CSA will work well for this. You would need a license for each server. It is managed with CiscoWorks VMS.

http://www.cisco.com/en/US/products/sw/secursw/ps5057/index.html

Tom S

topic Re: Recommendation Needed on Host Based Intrusion Detection in Network Security

Recommendation Needed on Host Based Intrusion Detection

Re: Recommendation Needed on Host Based Intrusion Detection