I have a question about
an article:
Intrusion Detection Software
This page covers how to install a Intrusion Detection System (IDS) and do it for free!
Located on page:
http://www.auditmypc.com/freescan/readingroom/intrusion_detection.asp
After you get this IDS computer all setup,
Where do you install this computer?
Between the router and your server?
and Do you have to have two network cards?
I’m assuming that you place this device between your router
and your server, with this device with two network cards one
for incoming traffic and the second for outgoing traffic!???
The instructions for setting this IDS up seems to be very clear.
But how you you install the box?
Sincerely
Mike Montgomery
Good question Mike,
I’m guessing you’re going thinking about a SPAN (Switch Port Analyzer) port, you simply tell your switch to send a copy of all the traffic (TX and RX) to another port and have the IDS Software plugged into this port.
You need only one NIC.
Regards,
Jim.
I received your email – you only need one network card. Go to the switch, tell it to copy all transmissions to a port (might be called a monitor port, etc), then connect that IDS to that port and you should be all set.
Regards,
Jim.