[unisog] any experience with Q1Labs?

Wes Young wcyoung at buffalo.edu
Sat Jun 11 16:17:30 GMT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I took a look at Q1's demo (the webcast version with an engineer).. it
looked ok... I believe Cornell works with them and likes them. I'm also
looking at a product from OpenService and Ciscos (Protego) PN-MARS...

So far from my research, which hasn't included a demo (yet) i've been
very impressed with the PN-MARS. I had a cisco engineer in to live demo
it, and (especially) if you have a cisco network, it fits nicely since
the guys at protego were formerly of cisco as well.

IMO: Cisco's new venture into the IPS/IDS SEM/SIM market might be behind
the market slightly... but when they pull up the slack with a product
like this, and their ways of integrating it into your core, it seems
very worth the investment.

sunia wrote:
> Hi, All!
> 
> We're just beginning to evaluate SEM/SIMs.  Q1Labs came to talk to us 
> and seemed to understand networking.   Just wondering if anyone had any 
> experience with them.
> 
> We're also looking at NetForensics and Protego - getting eval units.
> 
> Sunia
> 
> 
> ----------------------------------------------
> Sunia Yang
> Network Engineer
> Stanford University
> sunia.yang at stanford.edu
> (650)723-3543
> 
> _______________________________________________
> unisog mailing list
> unisog at lists.sans.org
> http://www.dshield.org/mailman/listinfo/unisog
> 
> 

- --
Wes Young
Network Security Analyst
University at Buffalo
GPG Key: http://saxjazman9-security.blogspot.com/2005/01/gpg-key.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFCqw6a1M5o0FsrrbERAoH1AJwPHjYZUF+Apb8lI/PxRcEUwk7CHQCfdH14
lkCNcpNQ5bxk2nzCTY+ANy0=
=KVer
-----END PGP SIGNATURE-----


More information about the unisog mailing list