IDS

IDS, or Intrusion Detection System, is an application that monitors for malicious activity and policy violations on your network. When configuring this event source in InsightIDR, the IDS data is attributed to the user and asset details page and allows you to search through the data. However, it does not produce alerts.

IDS Event Sources

Rapid7 can integrate with the following IDS tools to generate alerts in InsightIDR and the Insight Platform:

• Cisco FirePower (Sourcefire IDS, Cisco FireSIGHT)
• Corero IPS
• Dell iSensor
• F5 Networks BIG-IP Local Traffic Manager
• McAfee IDS
• Metaflows IDS
• Security Onion
• Sentinel IPS
• Snort
• Trend Micro TippingPoint

InsightIDR also supports:

• Dell SonicWall
• Network Sensor