Author Topic: best way to secure network  (Read 33 times)

mrmulti

  • Occasional User
  • ***
  • Posts: 16
    • View Profile
best way to secure network
« on: September 25, 2004, 10:16:27 am »
I have windows 2003 server with 50 clients. We are on business cable with a linksys router. What is the best Intrusion Detection - software or hardware to get?

JTGalt

  • Wise Sage
  • *****
  • Posts: 3268
    • View Profile
Securing Your Network
« Reply #1 on: September 26, 2004, 08:32:28 am »
There really is no best NIDS (Network Intrusion Detection System)

Because it is a very complicated area there is room for a number of different approaches in the pattern matching algorithms that they use.

I like SNORT because I have access to the source code and can follow exactly how it works and can tweak it if necessary.
www.snort.org/

Another One is Snare which I am currently evaluating
www.intersectalliance.com...cts/Snare/

Here is a list of others.
Network Intrusion Prevention Systems
www.esecurityplanet.com/r...php/964391

This is a great FAQ that covers many of the points that you need to consider to make a decision of what is best for you.
Intrusion Detection Faq
www.sans.org/resources/idfaq/

This is a good site for IDS Links
is-it-true.org/fw/fwtips6.shtml

This article is a very good How To for Interpreting Network Traffic data.
secinf.net/info/ids/intv2-8.htm

This is article is a very good How To for determining if an intruder has caused any damage
www.networkmagazine.com/a...00426S0011

But really instead of detecting and watching someone intrude into your systems you really want a way to prevent the intrusion in the first place.

Network Intrusion Prevention Systems
www.networkintrusion.co.uk/inline.htm




Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf