[Snort-inline-users] Bridging IPS

[christiaan <chr...@vi...>]

Hi

I am new to IPS and I have been doing some research  to try to=20
understand what is the most effective way to deploy.  Is it effective to=20
deploy a bridging firewall/IPS on a file server in an intranet or LAN to=20
provide an extra layer of security?  The LAN/intranet would be behind an=20
IPtables firewall.

If it is possible what would be the most effective method of utilising=20
ebtables. Should the topology be:

IPtables router  =BB   bridge IPS/ file server   =BB   LAN/Intranet

or


IPtables router  =BB LAN/Intranet  =BB    bridge IPS/ file server

Thanks in advance

Chris