Hi Mark, It is always a good to put IDS behind the firewall. As firewall blocks most of the unwanted traffic and if someone manages to bypass the firewall then he/she may be detected by IDS.
enjoy, yash [EMAIL PROTECTED] wrote: > Hi all, > > Any help with the following greatly appreciated! > > Can anyone point me in the right direction for good white papers/documents on >deciding where to locate an IDS on a network? > > The background to this is that I want to implement an IDS on a network which has an >incoming/outgoing Internet connection for all users. There is currently a firewall >protecting this connection, but I want to know whether I should locate the IDS in >front of or behind the firewall? Should the IDS be placed in a DMZ or not? > > (As you can tell, I am new to all this!) > > Regards, > > Mark. > > _______________________________________________________________________ > Never pay another Internet phone bill! > Freeserve AnyTime, for all the Internet access you want, day and night, only £12.99 >per month. > Sign-up at http://www.freeserve.com/time/anytime