location of an IPS

["Doug Fox" <dfox168 () hotmail com>]

I'm sorry for this dumb question, which may have been answered many times.

Where should one place an TippingPoint Unity 50 IPS device?  Behind or in 
front of a firewall?

I have a/the TippingPoint behind a Check Point firewall. Even though we 
externally and internally port-scanned the firewall and the IPS many times, 
the activity log did not contain any record of the "attacks".

What am I missing here?  Any pointers are appreciated.

Thanks,

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------