IDS mailing list archives

Re: location of an IPS


From: ilaiy <ilaiy.e () gmail com>
Date: Fri, 21 Oct 2005 15:47:46 -0500

IPS could be either kept externally or internally .. Most of them
prefer to keep an external one ..(but patched completely)

Just check the rules for the IPS you may not have given one for the
port scan ..

./thanks
ilaiy

On 10/19/05, Doug Fox <dfox168 () hotmail com> wrote:
I'm sorry for this dumb question, which may have been answered many times.

Where should one place an TippingPoint Unity 50 IPS device?  Behind or in
front of a firewall?

I have a/the TippingPoint behind a Check Point firewall. Even though we
externally and internally port-scanned the firewall and the IPS many times,
the activity log did not contain any record of the "attacks".

What am I missing here?  Any pointers are appreciated.

Thanks,

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------



------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------


Current thread: