Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 961 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Does Global IPS Setting need to be Internal or External?

isildur
When I setup this whitebox with 7.305, it is showing External (Network) in the Local Networks box under the Network Security->Intrusion Protection->Global Tab. Is that correct? Shouldn't it be sniffing traffic on the external interface? Or does it sniff the passed traffic after it passes all other filters? If so, this would seem to be counter intuitive if someone is trying to penetrate your box and it drops all the suspicious packets you may not know in time to prevent a successful attack.

I am a noob at this and I know its probably painfully obvious. I was just confused.

Thanks,
isildur


This thread was automatically locked due to age.
Parents
  • 0
    No, the Global tab asked for your 'Local networks'.  You likely will only have 'Internal (Network)' in there although you might have 'DMZ' if you have one, or other internal networks.

    In my experience, havine 'External (Network)' in that box causes the CPU to go over 100% once there's a little load on the box.

    Cheers - Bob
  • 0 in reply to BAlfson
    Thanks for the tip!

    BTW, is there a page somewhere with example configuration for whiteboxes? I have googled and browsed the Astaro site and I think I am missing something. [:)]


    Thanks, 
    isildur
Reply Children