RE: VPN concentrators

["Schouten, Diederik (Diederik)" <dschout () lucent com>]

> This IDS serves for both VPN as well as non-VPN traffic. So it cannot
> be trained down to near silence. This ids looks for incoming 
> as well as outgoing traffic from internal network for suspicious traffic.
> The DMZ ids has been customized only for the services running in the DMZ.

How do you mean?

If you customize the IDS in the DMZ, that would kinda negate the purpose of
the IDS in the DMZ, correct?

I'd want to know everything that goes on in the DMZ, in case someone homes
one of your servers.
That's one of the purposes of a DMZ, if I'm correct...


Greetings,

        Diederik
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards