Picking a Platform
Factors other than raw performance should influence your platform decision. The platform choice you make will ultimately dictate how well Snort functions and the amount of effort you will have to expend to guarantee that Snort runs smoothly. The security posture, stability, and external applications available to work in concert with Snort are all influenced by platform selection.
An IDS must have one of the highest levels of assured security in a network architecture. Having a compromised IDS is much worse than having no IDS at all. After you deploy intrusion detection capability, a degree of trust grows in the idea that your network is being properly monitored for malicious activity. If the IDS is unknowingly compromised, ...
Get Intrusion Detection with Snort now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
