Combine this with a good DNS service and you will get a nice and fast security.
The protection it offers is as good as your rules are. I prefer IDS/IPS in inline mode as it's lightning fast.
I prefer obviously both if possible, but this is difficult sometimes. There's always a compromise to be made between speed and security. Both work with rules/signatures, both heavily dependent on these (except some newer technologies). IDS/IPS will scan network traffic (packets) while the AV scans files. IDS/IPS will not block viruses like an AV but rather they are complementary to each other. Obviously, nobody but yourself is responsible for your deployment. Combine these with 'Security through obscurity' philosophies and techniques and you should be safe enough. I use these techniques for my home network and many of my clients.
0 kommentar(er)
