Large network, need to proactively protect/monitor malware/virus activity
Posted on 2006-06-19
I would like to find out what I could do to set up some traps or monitors at certain points in my network that would alert of me things such as port scans etc...
I would like passive solutions that only become active on detection of banned activity.
Our network doesnt have any such 'tripwire' mechanisms, and im looking for as many suggestions as possible, because the solution will undoubtably borrow from multiple concepts.
Could someone please provide some suggestions to me?