DeepSight Extractor allows both Intrusion Detection and firewall systems to serve as DeepSight Sensors. By design, any firewall or intrusion detection system, regardless of operating system, can submit data via Extractor. The only conditions are that Extractor has a parser for the specific firewall or IDS in use, and that the machine running Extractor has access to the firewall or IDS log files.
Comments