|
-
August 13th, 2004, 12:15 AM
#2
A IDS system doesn't really run on just a port, it runs on a whole server, usually in front of all your computers before the switch or router.
So it would look like this
WAN Connection --> Snort --> Router/Server ---> Switch
or somethign similiar to that.
Snort or any other IDS listens on all ports and monitors all traffic for the rules you specify it to watch for.
So in other words all the traffic must pass through one box which has the IDS system on it in, before the internet traffic is branched off to the other computers, in order for the IDS to be used effectively.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|