A Intrusion Prevention System (IPS) is a type of network security system which provides some level of proactive, automated defense against unauthorized access.

learn more… | top users | synonyms

1
vote
3answers
521 views

Simple application level file integrity monitoring & Intrusion detection (IDS)

We've been searching for a simple file integrity monitoring solution on CentOS/Linux that will work on the application level. We are not looking for OS/network level IDS as OSSEC and the others do a ...
0
votes
1answer
68 views

Is a reverse proxy useful behind a load balancer and IPS

We have a Web infrastructure with a farm of Web Servers. They are behind a loadbalancer which does SSL offload. We also have a IPS and obviously a set of firewalls. Now, for security reason we have ...
0
votes
0answers
7 views

Is OSSEC effective in protecting LAMP servers running Drupal?

I noticed that the 2.8.1 rules have wordpress rules and other product rules listed, but no Drupal rules. Is its safe to assume OSSEC, acting like an IPS in active mode, is just not going to block any ...
0
votes
0answers
68 views

Inter-VLAN Malicious Code Scanning

I am trying to find an inbuilt solution on a Cisco Catayst 3750X Switch to scan all traffic routed from one VLAN to another for malicious code. The situation is that we currently have a development ...
0
votes
0answers
69 views

Adding IPs using range scripts very slow / locking up CentOS 6

We're running into a very odd issue w/ a CentOS 6 server. We have several ifcfg-range scripts setup to add /24's which are tunneled to the server using GRE. These same scripts and tunnels work fine ...
-1
votes
0answers
26 views

Snort alerts analysis (web interface)

I have a question about Snort (or maybe any other IDS/IPS, any working solutions would be ok). The goal is to set up some web interface providing a way to view the whole TCP stream packets of each ...