Hi guys Is it a perferrable to have snort and acidlab running on a firewall machine masquerding a network and logging to an internal server running apache-ssl and mysql ? I would like to setup some sort of IDS but also have more info on traffic in the internal network ?
Thnaks ..Craig