White Papers

Virtual Perimeter: Extending IPS and Firewall Protection Internal to the Network

• Tags:
• traffic,
• policy,
• prevention,
• exploit

Overview Whilst most organisations would not consider connecting their corporate networks to the Internet without a properly-configured firewall in place, more advanced forms of intrusion detection and prevention - such as Intrusion Prevention Systems (IPS) - are relatively new. To date, "traditional" IDS and IPS appliances have been considered as completely separate from firewalls, but essentially - at a low level - they perform very similar tasks. Firewalls are essentially policy enforcement devices, designed to match traffic against a set of access control rules, and accept or deny traffic based on those rules. On the other hand, IPS devices are designed to detect potential exploit traffic rather than enforce policy.

• 
• Did you find this white paper useful? 1 out of 2 users found this white paper useful

• Subscribe to the IT White Papers Newsletter
• White Paper RSS