[Snort-users] Correct setup
erek at ...577...
Thu Nov 1 12:19:40 EST 2001
On Thu, 1 Nov 2001, snortlst snortlst wrote:
> I want to monitor with snort sensor traffic that comes through or firewall.
> In order to do so I connected snort machine to the lan switch and configured
> switch to mirror all traffic from the lan firewall nic to snort sensor port.
> Is that a correct way to figure out what comes through firewall and reaches
> the lan network?
Yeppers. All good.
That should show everything that passes thru the firewall from the outside to
the inside. It will also show all traffic destined for the firewall, from
your inside nets.
More information about the Snort-users