Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Are there any recommendations for an IDS and other critical security services for a Windows 2008 webserver?

share|improve this question
What "other critical security services" are you referring to? – joeqwerty Feb 8 '10 at 18:17
malware, virus software – zsharp Feb 8 '10 at 19:21

You can use the OSSEC HIDS that can monitor logs, changes on the filesystem and registry keys.

OSSEC can work as a standalone software (just one server) or reporting to a central manager. There is a web UI and you can also manage alerts with Splunk.

If you want to add up more security services, you can integrate OSSEC alerts into OSSIM and get other security features such as vulnerability management or correlation.

share|improve this answer
appears you still need a linux server to manage any windows agents? – zsharp Apr 2 '10 at 14:33

You haven't specified whether you are looking for a HIDS or NIDS, so I've assumed the former - Verisys is a file integrity monitoring system for Windows that should fit in with the rest of your security (antivirus, firewalls etc). For example, you can use it to detect any changes to critical system files or web pages.

share|improve this answer

I highly recommend OSSEC

OSSEC is an Open Source Host-based Intrusion Detection System. It performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Regards D

share|improve this answer

Looking for software based on the windows box, or an external device?

If external look at SonicWALL, or Barracuda's Web App Firewall:

SonicWALLs are typically more higher end than the Barracudas.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.