Security Tools White Papers
White Paper: Deploying Network Taps With Intrusion Detection Systems
Overview Historically, passive and active modes were the two key means of IDS deployment. In passive mode, the IDS monitors all traffic for potential attacks, but is not deployed in-line. In active mode the IDS - now known as an intrusion prevention system - is deployed in-line to be able to both monitor and block attacks. Because of the legitimate worry of false positives causing an intrusion prevention system to block valid network traffic, passive mode is still the most common mode of deployment - but security administrators and IDS vendors have been working on ways to add active responses, such as the ability to drop packets and end sessions, to an otherwise passive deployment.
| Publisher | Net Optics | File Format | |
|---|---|---|---|
| Date Published | March 2004 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 5 out of 9 users found this white paper useful
White Paper RSS
Download
Register
