RE: IDS on VPN-GW

From: Keith T. Morgan (keith.morgan@terradon.com)
Date: 12/02/02

  • Next message: Rob Shein: "RE: IDS on VPN-GW" 
    Date: Mon, 2 Dec 2002 10:04:54 -0500
From: "Keith T. Morgan" <keith.morgan@terradon.com>
To: <counter.spy@gmx.de>

    We've deployed this scenario on Linux + Free S/Wan running snort on all physical interfaces and all ipsecX interfaces for folks. The fastest wire-speed we've had on one of these deployments is T1, and a PIII450 has handled VPN traffic at wirespeed even with the added load of snort. Sorry I don't have any higher-bandwidth benchmarks for you.

    -----Original Message-----
    From: counter.spy@gmx.de [mailto:counter.spy@gmx.de]
    Sent: Friday, November 29, 2002 4:20 AM
    To: focus-ids@securityfocus.com
    Subject: IDS on VPN-GW

    Hi folks,
    I have recently tested snort on a vpn-gateway that runs on linux (just for
    testing purposes, no productive server).

    Relevant Pages

    • Re: GUI
      ... Richard Harris wrote: ... > I am looking for a quick and easy way of building gui's, nothing fancy ... > and primarily for testing purposes. ... Have Fun, & Linux! ...
      (comp.unix.programmer)
    • Re: Closed source apps....
      ... Get yourself a copy of VMWare and install a few Linux virtual machines ... for testing purposes. ... "Dragonmaster Lou" | "Searching for a distant star, ...
      (comp.os.linux.development.apps)
    • GUI
      ... I am looking for a quick and easy way of building gui's, nothing fancy ... and primarily for testing purposes. ... sparc, etc, and linux if possible. ... Any recommendations? ...
      (comp.unix.programmer)