Question about IDS [CLOSED]

All about Snort integration in Artica

Question about IDS [CLOSED]

New postby jamlydm » Sat Jul 09, 2011 2:01 am

I have an Artica Server Appliance with: FileSharing, MailServer and SQUID with only 1 network card.
May i install IDS with Snort in this Artica Server? or I need to config another server?

In my network i have 16 users, almost 25 (PC and servers).
jamlydm
 
Posts: 278
Joined: Thu Jul 23, 2009 3:57 pm
Artica servers number: 1
Linux System: Debian
Technical skills: Microsoft Windows skills

Re: Question about IDS

New postby admin » Sat Jul 09, 2011 5:30 pm

IDS should most likely used when your server is connected in front of Internet (web server, mail server, VPN server or any Artica in DMZ)
IDS is necessary for Microsoft Windows computers against trojans that trying to attacks Windows security holes.
But Artica is stored on a linux server that don't care about Windows viruses so it is not necessary to install IDS in a LAN.
User avatar
admin
Site Admin
 
Posts: 11943
Joined: Wed Oct 17, 2007 7:59 am
Location: France

Re: Question about IDS

New postby jamlydm » Sun Jul 10, 2011 6:52 am

I was thinking that IDS was to detect not autorized access in a network.

OK let me explain you what i want. I want in my network to analyze the traffic and determine if someone that is not my user is in my network.

Sometimes come people to the company and i think they use my network or maybe they are doing something that makes my network slow. I think they have their own dns or mailserver, how can i monitor my network in that way.

I want to know if there is new users in my network that i dont know or what my users are using in my network.

What can i do? I feel as i dont have control or i dont know what is happening in my network when people is connected.
jamlydm
 
Posts: 278
Joined: Thu Jul 23, 2009 3:57 pm
Artica servers number: 1
Linux System: Debian
Technical skills: Microsoft Windows skills

Re: Question about IDS

New postby admin » Sun Jul 10, 2011 9:18 am

This is not IDS that match your request

it is planned to implement this feature, i will add my post myself to remember this
viewtopic.php?f=12&t=4039&start=0
User avatar
admin
Site Admin
 
Posts: 11943
Joined: Wed Oct 17, 2007 7:59 am
Location: France

Re: Question about IDS [CLOSED]

New postby admin » Sat Jul 16, 2011 6:00 pm

User avatar
admin
Site Admin
 
Posts: 11943
Joined: Wed Oct 17, 2007 7:59 am
Location: France


Return to IDS with Snort

Who is online

Users browsing this forum: No registered users and 1 guest

cron