Re: IPS quantity and location?

Hey I hear that celebrity IE Scott saying inside/outside is the correct way to deploy these babies, I'm no security expert :)

--
BR
Tony
Sent from my iPad
On 25 Jun 2013, at 16:30, Carlos G Mendioroz <tron_at_huapi.ba.ar> wrote:
> Depends...
> if you have only one or if you have many.
> Outside is going to be generating lots of events, inside will be more of
> a security reassurance that your filters are working. That from an IDS
> point of view.
> If in IPS mode, inside interface would let you be much more aggresive.
> My .02
> -Carlos
> 
> John Pelletier @ 25/06/2013 09:52 -0300 dixit:
>> This question revolves around quantity and placement of an IPS on a network. 
>> It is my
>> understanding you would place your IPS as close as possible ie
>> internet facing ASA to
>> your outside network. Of course every situation is
>> different in regards to what you want
>> to protect so this is a more general aka
>> best practices question.
>> 
>> 
>> Blogs and organic groups at http://www.ccie.net
>> 
>> _______________________________________________________________________
>> Subscription information may be found at: 
>> http://www.groupstudy.com/list/CCIELab.html
>> 
>> 
>> 
>> 
>> 
>> 
>> 
> 
> -- 
> Carlos G Mendioroz  <tron_at_huapi.ba.ar>  LW7 EQI  Argentina
> 
> 
> Blogs and organic groups at http://www.ccie.net
> 
> _______________________________________________________________________
> Subscription information may be found at: 
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net