[Snort-users] Switch TAP placement question.

Brei, Matt mbrei at ...8727...
Thu May 15 08:51:23 EDT 2003


Hello all,

 

I have a bank of about 12 24 port switches.  All of the routers and
firewall are on the first switch, then the servers are on second and
third, then all workstations and printers are on the rest.  Where should
I place the tap so that Internet activity can be monitored as well as
compromise attempts against a server or router?  Should this go on the
router/firewall switch since it is the last switch before the "outside"
or should I use more then one tap?

 

Thanks in advance,

 

Matt Brei

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030515/5837b54e/attachment.html>


More information about the Snort-users mailing list