Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am working on setting up new networking for datacenter hosting a web site.

We have following topology

Internet -> Firewall1 -> ReverseProxy(for security) -> Web Server -> firewall2 -> databse

Firewall is linux iptables hardened

We do not have any IPS or IDS in here.

Question is Is ips/ids required for web server hosting? does it gain anything? only ports that are open is 80 and 443

share|improve this question

2 Answers 2

up vote 2 down vote accepted

An IPS will help, simply by noticing some attacks against your reverse proxy/webserver/sql injections and so on. The real question is not "will an IPS help" though, but "is the benefit of an IPS worth the extra cost and complexity it will add to my network". No one is going to be able to give you a definitive answer for that, however, assuming you're running some kind of WAF (i.e. mod_security or the like), then the answer is reasonably likely to be no, an IPS is not required.

share|improve this answer

An IPS (such as a tippingpoint) can catch things like common SQL injection strings and other layer 7 attacks that a firewall won't catch. That means you do gain some added security as it's an additional layer (defense in depth approach) and poorly written code will be less vulnerable.

I'm not sure if anyone can answer if such a thing is required or not

share|improve this answer
    
I assume he's already doing this on his reverse proxy though. –  Cian Aug 27 '10 at 20:14

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.