Re: [Snort-inline-users] Bridging IPS

[Ken G. <ken...@ro...>]

You would want to deploy it as:

Router -> Bridge -> LAN

The bridge acts as the intermediary and if you were to place it on the
LAN instead of in-front of it you would now be doing IDS instead of IPS.

christiaan wrote:

> Hi
>
> I am new to IPS and I have been doing some research  to try to
> understand what is the most effective way to deploy.  Is it effective
> to deploy a bridging firewall/IPS on a file server in an intranet or
> LAN to provide an extra layer of security?  The LAN/intranet would be
> behind an IPtables firewall.
>
> If it is possible what would be the most effective method of utilising
> ebtables. Should the topology be:
>
> IPtables router  =BB   bridge IPS/ file server   =BB   LAN/Intranet
>
> or
>
>
> IPtables router  =BB LAN/Intranet  =BB    bridge IPS/ file server
>
> Thanks in advance
>
> Chris
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by Oracle Space Sweepstakes
> Want to be the first software developer in space?
> Enter now for the Oracle Space Sweepstakes!
> http://ads.osdn.com/?ad_idt12&alloc_id=16344&op=3Dclick
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users