Hi,
Recently I got few mysql attacks, and my internal IDS detected them and notified me, then I go back to check Astaro, there is nothing there.
My question:
1. Have anyone compare the IDS/IPS detection rate between Astaro and normal Snort IDS install?
2. How many rules included in Astaro compared with normal Snort install?
I have one IDS on Solaris 10, and using latest Snort and rule set. It seems like my IDS detect more. So far my Astaro only detected port scan and ICMP/UDP flood, but I turn on all rules so I expect that it can detect previous mysql attack.
Thanks,
Hsinan
This thread was automatically locked due to age.
