location of an IPS

From: Doug Fox (dfox168_at_hotmail.com)
Date: 10/19/05

  • Next message: kyallam_at_hotmail.com: "Juniper Vs Tipping point, Intrushield and Stonegate" 
    To: <focus-ids@securityfocus.com>
Date: Wed, 19 Oct 2005 16:57:57 -0400

    I'm sorry for this dumb question, which may have been answered many times.

    Where should one place an TippingPoint Unity 50 IPS device? Behind or in
    front of a firewall?

    I have a/the TippingPoint behind a Check Point firewall. Even though we
    externally and internally port-scanned the firewall and the IPS many times,
    the activity log did not contain any record of the "attacks".

    What am I missing here? Any pointers are appreciated.

    Thanks,

    ------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it
    with real-world attacks from CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    ------------------------------------------------------------------------

  • Next message: kyallam_at_hotmail.com: "Juniper Vs Tipping point, Intrushield and Stonegate"

    Relevant Pages

    • Re: location of an IPS
      ... > Where should one place an TippingPoint Unity 50 IPS device? ... Broadly speaking in front of the firewall ... remember is to look for outgoing attacks as well, ... Broadly speaking you're saying "it's broken" to which I can only say ...
      (Focus-IDS)
    • RE: [Full-Disclosure] Firewall solution for Windows 2003 Server
      ... Consider also a hardware firewall that runs at Layer 2, ... You might consider a L2 firewall deployment combination with a Host-based ... firewall/IPS deployment, or an in-line IPS device to protect my server farm, ...
      (Full-Disclosure)