Security - Intrusion Detection

Contents

Overview

Intrusion Detection Information
Description An advanced intrusion detection system.
Package Name cc-snort
Configuration Page Network > Security > Intrusion Detection


The intrusion detection package is included with ClarkConnect to make users more aware of some of the daily hostile traffic that can pass by your Internet connection. The software is able to detect and report unusual network traffic including attempted break-ins, trojans/viruses on your network, and port scans.

Services

New exploits are discovered everyday. The intrusion detection software maintains a uses a list of 2000+ rules. You can receive automatic updates by subscribing to the Intrusion Detection Updates service.

Configuration

The intrusion detection system includes a daily report. Do not panic when you see alerts in this daily report. In fact, it would be quite unusual not to see anything reported. Hostile traffic is a normal part of today's Internet and it is one of the reasons firewalls are necessary. You can find more information about the report here.

Warning 
  Intrusion detection does require some horsepower. If you find your system sluggish, you might want to consider disabling the software.  
 


Security and Policy Rules

There are two different types of rules for the intrusion detection system. The Security rules detect issues related to overall system security, while Policy rules detect issues related to your organization's Internet usage policies. For example, the chat policy rules will detect instant messaging traffic that goes through your ClarkConnect system.

Links

Retrieved from "http://wiki.clarkconnect.com/docs/Security_-_Intrusion_Detection"

This page has been accessed 7,734 times. This page was last modified on 26 April 2007, at 15:16.