ITObserver: Block Network Attacks with SnortSAM

[ Thanks to Jon for this link. ]

"SnortSAM is an open source agent that allows Snort intrusion detection system to block attacking connections by reconfiguration of access control lists on firewalls--stopping an attack in progress. SnortSAM can order changes on firewalls such as CheckPoint, Cisco PIX firewalls, Cisco routers, UNIX-based firewalls and more.

"SnortSAM consists of two components: a patch for the Snort IDS itself and the SnortSAM application, which can be run on a dedicated SnortSAM server or on the Snort sensor..."

Complete Story

Related Stories:

• HowtoForge: Intrusion Detection With BASE and Snort(Jul 11, 2006)
• The Register: The Man Behind OSSTMM(Apr 06, 2006)
• Linux.com: Snort on OpenWrt: Guarding the SOHO perimeter(Mar 28, 2006)
• Help Net Security: The Story of Snort: Past, Present and Future(Oct 26, 2005)