I have heard about McAfee Entercept and Cisco Security Agent (formerly Okena). Are these products similar to Sanas Primary Response?
Rules-based solutions, such as McAffee Entercept and Cisco Security Agent carry two hidden costs, which over time greatly exceed the original cost of the security software itself. First is the overhead cost associated with the amount of time required to manage the tuning during both its initial deployment and subsequent change management cycles. The second hidden cost is the real loss of productivity resulting from successful penetrations from unknown attacks, which signature and improperly configured rules-based systems neither detect nor prevent.
