Hi,
Does the IPS filter traffic which is routed through the UTM's proxies?
e.g. the WAF, SOCKS, http proxy, SMTP proxy, POP proxy, VOIP, ...
I ask because I setup a WAF today and haven't seen a single entry in the IPS log (other than the snort startup messages).
However, I'm running a single-NIC, so it may not be a fair test.
Barry
This thread was automatically locked due to age.