Network Computingwww.networkcomputing.com

Enterasys' Dragon Intrusion Detection 7.1

Posted by Jordan Wiens on August 26, 2005

Tags: Data Protection,  IDS,  IPS,  Managed Firewall and Intrusion Detection,  Other,  Security and Privacy,  Software and Web Development,  intrusiondetection,  intrusionprevention,  security

Channel: Data Protection, Other

Setup is simple. It's based on the Zero G InstallAnywhere Java installer, which establishes the type of deployment, interface configuration and basic device settings. I used a standalone installation, and all management IPs were set to the lab network IP of the device. I used one of the on-board ports for a management interface and assigned it that address. A crossover cable connected one PCI port to my test client, which would serve as an attacker; the other PCI port was connected directly into the network.

Good • Install and management process greatly improved • New signature language offers additional features and ease of use • Intrusion-prevention capability is a solid start Bad • Software-only Dragon receiving less emphasis • Intrusion-prevention response types still need work Dragon Intrusion detection 7.1, starts at $7,995. Enterasys Networks, (877) 801-7082, (978) 684-1000. www.enterasys.com

InstallAnywhere was also used when I installed the management client onto another test server. Since the management client is Java, the installer provides its own JVM for the client, helping to reduce dependencies.