Security Basics mailing list archives

Re: Firewall / IDS for web db app site


From: Mark Ryan del Moral Talabis <talabis () gmail com>
Date: Wed, 2 Nov 2005 12:01:43 +0800

It won't hurt to have an IDS but if your going to be working on a high
traffic site better brace yourself for the amount of false positives
and the effort to clean them up.  =)

Best Regards,
Ryan Talabis
Philippine Honeynet Project
http://www.philippinehoneynet.org



On 31 Oct 2005 20:12:20 -0000, jp () sociustechnologies com
<jp () sociustechnologies com> wrote:
Hi all,

I'm building a .com project (web db style with e-commerce parts, looks like ColdFusion might be the tool we'll use) 
and I'm working on the architecture.

For the firewall / IDS part, I need advice.

I'm thinking either Cisco 506 or m0n0wall to protect the db server.  What about IDS - do I need it?  Snort a good 
choice?

Thanks!



Current thread: