Enterasys Dragon Host Sensor

A host-based intrusion defense tool, Dragon Host Sensor monitors individual systems running today's most common operating systems, for evidence of malicious or suspicious activity in real time.

Dragon Host Sensor may be deployed on a protected host where it uses a variety of techniques to detect attacks and misuse on the system, including analyzing the security event log, checking the integrity of critical configuration files, or checking for kernel level compromises. This hybrid approach ensures that no misuse goes undetected.

Dragon Host Sensor may also be deployed on a dedicated analysis system where logs are forwared and analyzed from most commercial firewalls, routers, switches, and other IDS devices. Correlating events from these devices and from Dragon Network and Host Sensors is critical in identifying which events are the most serious, as well as understanding their origin and impact.

Using non-conventional techniques to identify attempted intrusions or general misuse, the Host Sensor can be installed on a dedicated system to create a "deceptive" server designed to entice an alarm on attempted intrusions by simulating a fake web server, telnet server, or mail server.

• Product Description: Dragon Host Sensor, license
• Category: Security applications
• Subcategory: Security, data encryption, security, intrusion and vulnerability detection, security, VPN software
• License Type: License
• License Qty: 25 users
• License Pricing: Standard

• Platform: Linux, Windows, AIX, HP-UX, Solaris
• OS Required: Red Hat Linux 9, HP-UX 11.x, IBM AIX 4.3.3, SunSoft Solaris 8, Microsoft Windows NT, Debian Linux, SunSoft Solaris 9, Microsoft Windows 2000 / XP, SuSE Linux 8.1, Red Hat Linux 8.0, Mandrake Linux 9.0, IBM AIX 5.x, Slackware Linux 8.1