I'm configuring IPS on my Astaro 7.104 machine, and I'm noticing some wording that's not totally clear to me. When configuring IPS, it says to list any "local networks" that you want protected by the IPS system. Is this asking me to include my internal LAN in that list, so it can be protected from internet attacks? Should I also include my external, public-facing subnet in that list? Or just the external subnet?
Seems like I'd want to protect my external net from attacks as well, since there are various externally-facing ports on the Astaro machine listening for traffic, such as the web admin port, ssh, smtp, etc. Sure, most of these ports are just DNATed into internal machines, but seems like it'd still be a good idea to protect the outside as well. [:)]
Anyway, just wondering. Thanks!
-joe
This thread was automatically locked due to age.
