Snort mailing list archives
RE: Snort sensor on a Firewall
From: "Michael Steele" <mes () go2dds com>
Date: Mon, 5 May 2003 11:12:02 -0700
Sireesha, In short: Placing Snort on the far side of the firewall will allow Snort to monitor all traffic. Placing Snort on the near side of the firewall will allow Snort to detect on everything that gets past the firewall. -Michael -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of sireesha gaddipati Sent: Monday, May 05, 2003 9:44 AM To: snort-users () lists sourceforge net Subject: [Snort-users] Snort sensor on a Firewall I am new to Snort. I am using snort for a class project.I have a doubt regarding placement of snort sensor. Can I place a snort sensor on a firewall and monitor all the traffic coming into internal network from the internet??? Will that be same as placing a snort sensor on a different box outside the firewall?? In brief will the snort on firewall be able to monitor all the packets before filtering them??? Thanks. Sireesha <http://sg.yimg.com/i/aa/icons/28/cricket.gif> Catch all the cricket action. Download Yahoo! Score tracker <http://in.sports.yahoo.com/cricket/tracker.html>
Current thread:
- Snort sensor on a Firewall sireesha gaddipati (May 05)
- RE: Snort sensor on a Firewall Michael Steele (May 05)
- RE: Snort sensor on a Firewall sireesha gaddipati (May 05)
- RE: Snort sensor on a Firewall Rafeeq Rehman (May 05)
- RE: Snort sensor on a Firewall Matt Kettler (May 05)
- RE: Snort sensor on a Firewall Rafeeq Rehman (May 05)
- RE: Snort sensor on a Firewall sireesha gaddipati (May 05)
- RE: Snort sensor on a Firewall Michael Steele (May 05)