O'Reilly logo

CCSP IPS Quick Reference by Anthony Sequeira

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 4. Advanced Configurations

Advanced Tuning

You should have the following information before you attempt advanced tuning:

  • The network topology

  • The network address space

  • Which inside addresses are static and which are DHCP

  • The operating system running on the servers

  • Applications running on servers

  • The overall security policy

Sensor Configurations

The location of the sensor is important for tuning considerations. The nature of the traffic that the sensor monitors will vary, and so will the security policy that the sensor interacts with. When the sensor is outside the firewall, for example, you should avoid assigning a high severity level to any single event. Also, turn off all response actions, and use the sensor to look for trends that might indicate ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required