IDS mailing list archives
RE: ids implementation
From: "Beauford, Jason" <jbeauford () EightInOnePet com>
Date: Mon, 18 Jul 2005 12:30:43 -0400
I decided to deploy my IDP behind the firewall but some people prefer to put it in front. It's all about the type of traffic you want to look at. Obviously, those in front of the firewall will be noisier than those behind. To get the packets through the IDS, you can place the device on a Network Tap or Hub before your switch, or if you go with a big name appliance, they should allow you to plug in their device inline before the switch, something like FIREWALL ==> APPLIANCE ==> SWITCH. -JMB -----Original Message----- From: yogeshmalik77 () hotmail com [mailto:yogeshmalik77 () hotmail com] Sent: Monday, July 18, 2005 10:20 AM To: focus-ids () securityfocus com Subject: ids implementation hi, how we can deploy an IDS in a network, where should we install the IDS and how the packets will go through that node is a switched networ? Regards Yogesh ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------ ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
Current thread:
- ids implementation yogeshmalik77 (Jul 18)
- Re: ids implementation Sanjay Rawat (Jul 20)
- Re: ids implementation Richard Bejtlich (Jul 21)
- <Possible follow-ups>
- RE: ids implementation Beauford, Jason (Jul 20)
- RE: ids implementation Soi, Dhruv (Jul 20)