Sax2 Intrusion detection system(Free)

A network based Intrusion Detection System, which also enables a user to prevent intrusions through a host of useful tools.

Features: Sax2 is a mainly an Intrusion Detection System (IDS). To this end Sax2 performs advanced real time packet capturing functions, advanced protocol analysis, 24x7 network monitoring, and Expert detection. It is a network based IDS: it collects, filters and analyzes all traffic that passes through a given network location. A single Sax2 monitor, appropriately placed (example: on a gateway) can provide IDS and intrusion prevention services for the entire network at a local site. Intrusion detection and prevention is done through the detection of a variety of attacks including Denial of Service, CGI/WWW, buffer overflow, windows and UNIX vulnerability, unauthorized access and hacking, ARP detection, IP spoofing and more. It also protects against worms, Trojans, etc. It allows you to configure the security policy with fine-grained controls. Real-time alerting and response to alerts is provided by Sax2. It allows for advanced traffic analysis, log generation, and in-depth packet decoding. These can be used to generate traffic usage reports and the statistical traffic analysis tools add to these capabilities. In this vein, it also provides for monitoring individual conversations and packet streams (or flows). A Name Table provides a list of aliases for addresses, port numbers and protocols on the LAN, and this can be used to set up different names and colors to make it easier for the administrator to narrow in on specific information in the future.

Overall: It is an excellent tool and promises to be useful for intrusion detection and prevention even in a hostile or particularly susceptible environment. The main drawback is that this really isn’t a tool for novice or even average users, with an interface which though it is quite intuitive, really, has too much detailed that can become overwhelming for a non-advanced user. A toned-down version with simple detection and prevention tasks is recommended so that it can become truly user-friendly to every kind of user.

Ax3soft Sax2 is a professional intrusion detection and prevention system that performs real-time packet capturing, 24/7 network monitoring, advanced protocol analyzing and automatic expert detection. By giving you insights into all of your network's operations, Sax2 makes it easy to isolate and solve network problems, identify network bottleneck and bandwidth use, detect network vulnerabilities and discovered the network whether there is a breach of security strategy and the signs of being attacked in the network of hazard, and then intercept and stop before their invasion. Network administrators can directly monitor http requests, email messages, ftp transfers, as well as real-time activities and message details for the two popular instant messengers: MSN and QQ. Sax2 is designed to be used by both IT professionals and novice users. Problems are clearly identified, and solutions are suggested in understandable terms. Whether you're a network administrator who needs to identify, diagnose, and solve network problems quickly, an IT professional who wants to monitor user activities on the network, a security manager who needs to ensure that the corporation's communications assets are safe, or a consultant who has to quickly solve network problems for clients, Sax2 has the tools that you need.
Main Functions
1.Intrusion Detection and Prevention
2.Conduct of Audits
3.Traffic Statistics
4.Customize Security Policy
5.Real-Time Alert and Response