Re: [Snort-inline-users] Bridging IPS

[bharathi <bha...@au...>]

christiaan wrote:

> Hi
>
> I am new to IPS and I have been doing some research  to try to 
> understand what is the most effective way to deploy.  Is it effective 
> to deploy a bridging firewall/IPS on a file server in an intranet or 
> LAN to provide an extra layer of security?  The LAN/intranet would be 
> behind an IPtables firewall.
>
> If it is possible what would be the most effective method of utilising 
> ebtables. Should the topology be:
>
> IPtables router  »   bridge IPS/ file server   »   LAN/Intranet
>
AFAIK, This would be the best way of implementation topology, 
Because,you can inspect and  prevent all vulnerable packets from 
internet ,before it is reaching your LAN using IPS also viceversa.

Thanks,
bharthix
--
http://bharthix.tk/