Re: best ids placement?

[Simon Adlem <sadlem () fotango com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 30 Jun 2003 6:42 pm, Brian Laing may quite possibly have written:


Hi,


Another approach is to use EtherTaps connected to a machine that has no 
physical connection to the internal network other than the passive connection 
via the taps. That way, no-one can detect or compromise your IDS as it is not 
connected to anything other than the taps.

We use EtherTaps here with good success.

Simon

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/OjCVAEPeBJNaHh0RAktqAJ9PSywtkb3o/qcy5mZjcr+yypnpWACfWJKC
VdTw48MrBPIMlDjsnvOqXtM=
=Ym0l
-----END PGP SIGNATURE-----


---------------------------------------------------------------------------
Captus Networks - Integrated Intrusion Prevention and Traffic Shaping  
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
 - Automatically Control P2P, IM and Spam Traffic
 - Ensure Reliable Performance of Mission Critical Applications
Precisely Define and Implement Network Security and Performance Policies
**FREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo
Visit us at: http://www.captusnetworks.com/ads/31.htm
---------------------------------------------------------------------------