From david@vorant.com Tue Apr 1 10:21:26 2008
Date: Tue, 01 Apr 2008 10:20:25 -0400
From: David J. Bianco <david@vorant.com>
Reply-To: sguil-users@lists.sourceforge.net
To: Sguil <sguil-users@lists.sourceforge.net>
Subject: [Sguil-users] ANNOUNCEMENT: Sguil Project Acquired by Cisco
[ The following text is in the "utf-8" character set. ]
[ Your display is set for the "ISO-8859-1" character set. ]
[ Some characters may be displayed incorrectly. ]
Several of us have blogged about this today, but in case you haven't heard
the Big News, here's a copy of the press release issued today. You
can read more about this at:
http://blog.vorant.com/2008/03/switching-to-sguil-whole-new-meaning.html
http://taosecurity.blogspot.com/2008/04/sguil-project-acquired-by-cisco.html
http://geek00l.blogspot.com/2008/04/sguil-excitement.html
David
----------------------------------------------------------------
Cisco Announces Agreement to Acquire Sguil Open Source Security Monitoring
Project
Acquisition Furthers Ciscos Vision for Integrated Security Products
SAN JOSE, Calif., and LONGMONT, Color., April 1st, 2008 Cisco and the Sguil
project today announced an agreement for Cisco to acquire the Sguil project,
a leading Open Source network security solution. With hundreds of
installations world-wide, Sguil is the de facto reference implementation for
the Network Security Monitoring (NSM) model. Sguil-based NSM will enable
Ciscos customer base to more efficiently collect and analyze security-related
information as it traverses their enterprise networks. This acquisition will
help Cisco to cement its reputation as a leader in the Open Source movement
while at the same time furthering its long-held vision of integrating security
into the network infrastructure.
Under terms of the transaction, Cisco has acquired the Sguil project and
related trademarks, as well as the copyrights held by the five principal
members of the Sguil team, including project founder Robert "Bamm" Visscher.
Cisco will assume control of the open source Sguil project including the
Sguil.net domain, web site and web site content and the Sguil Sourceforge
project page. In addition, the Sguil team will remain dedicated to the
project as Cisco employees, continuing their management of the project on a
day-to-day basis.
To date, Sguil has been developed primarily in the Tcl scripting language,
support for which is already present inside many of Ciscos routers and
switches. The new product, to be known as Cisco Embedded Monitoring Solution
(CEMS), will be made available first in Ciscos carrier-grade products in
3Q08, with support being phased into the rest of the Cisco product line by
4Q09. Linksys-branded device will follow thereafter, though the exact
deployment schedule has yet to be announced.
Were extremely pleased to announce this deal, said Ciscos Chief Security
Product Manager Cletus F. Simmons. For some time, our customers have told us
that our existing security monitoring products did not extend far enough into
their network infrastructure layer. Not only was it sometimes difficult to
intercept and monitor the traffic, but there were often political problems at
the customer site with deploying our Intrusion Detection Systems, as
management had heard several years ago that they ere dead. Now, with Sguil
integrated into all their network devices, theyll have no choice!
Although the financial details of the agreement have not been announced,
Sguil developer Robert Visscher will become the new VP of Cisco Rapid
Analysis Products for Security. This deal means a lot to the Sguil project
and to me personally, Visscher explains. Previously, we had to be content
with simply being the best technical solution to enable intrusion analysts to
collect and analyze large amounts of data in an extraordinarily efficient
manner. But now, well have the additional advantage of the worlds largest
manufacturer of networking gear shoving it down their customers throats! We
will no longer have to concern ourselves with mere technical excellence.
Instead, I can worry more about which tropical island to visit next, and which
flavor daiquiri to order. You know, the important things.
About Cisco Systems
Cisco, (NASDAQ: CSCO), is the worldwide leader in networking that transforms
how people connect, communicate and collaborate. Information about Cisco can
be found at http://www.cisco.com. For ongoing news, please go to
http://newsroom.cisco.com.
About Sguil
Sguil is the leading Network Security Monitoring (NSM) framework. It is built
for network security analysts by network security analysts. Sguils main
component is an intuitive GUI that provides access to a wide variety of
security related information, including real-time IDS alerts, network session
database and full packet captures. Sguil was written by Robert Bamm
Visscher, who was apparently too cheap to buy a book on Java or C.