?
Solved

IPS experts.

Posted on 2011-02-28
4
Medium Priority
?
827 Views
Last Modified: 2013-11-29
Hi all,
dear I need to know the right way to manage my new IPS and making sure that it is up to date...is there any check list or process that can be followed to make sure that my IPS is up to date...and it is able to protect my network.

cheers.
0
Comment
Question by:besmile4ever
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 10

Accepted Solution

by:
ujitnos earned 2000 total points
ID: 35005675
Who is the IPS from? like ISS, Tipping Point McAfee etc?

I had managed an ISS IPS and what i did was configure the critical signatures to be blocked. Dont block all of the critical signatures in one day, and before blocking a signature try to find out if the signature is really valid for your environment. Like if your office has all Windows systems there in no point in enabling any LINUX related signatures.

Take a bunch of 10 signatures and block them. Send a mail to maybe your Helpdesk to lookout for any signature specific issues, keep monitoring for a week, when all seems to be fine, take another atch of 10 signatures and block them.

make sure that the software/appliance gets automatic updates/signatures. dont just blindly start blocking them.

generate a report to see if any of the signature was triggered. See the details and try to find if the access was a genuine one.

These steps should get u started.
0
 

Author Comment

by:besmile4ever
ID: 35014670
Great ujitnos,
can i communicate with u on mail pls if you do not mind.. ebdaaco at gmail.
i will appreciate it...and i will approve your answer.

br.
0
 
LVL 10

Expert Comment

by:ujitnos
ID: 35014959
k... ujitnos at yahoo.com
0
 

Author Closing Comment

by:besmile4ever
ID: 35041947
excellent.
0

Featured Post

[Webinar] How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This article is written by John Gates, CISSP. Gates, the SNUG President-Elect, currently holds the position of Manager of Information Systems at Lake Park High School in Roselle, Illinois.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question