| |
|
|
|
 |
|
|
 |
|
| |
Security - Intrusion Detection
[edit] Overview
| Intrusion Detection |
Information |
| Description |
An advanced intrusion detection system. |
| Package Name |
cc-snort |
| Configuration Page |
Network > Security > Intrusion Detection |
The intrusion detection package is included with ClarkConnect to make users more aware of some of the daily hostile traffic that can pass by your Internet connection. The software is able to detect and report unusual network traffic including attempted break-ins, trojans/viruses on your network, and port scans.
[edit] Services
New exploits are discovered everyday. The intrusion detection software maintains a uses a list of 2000+ rules. You can receive automatic updates by subscribing to the Intrusion Detection Updates service.
[edit] Configuration
The intrusion detection system includes a daily report. Do not panic when you see alerts in this daily report. In fact, it would be quite unusual not to see anything reported. Hostile traffic is a normal part of today's Internet and it is one of the reasons firewalls are necessary. You can find more information about the report here.
 |
Warning |
 |
| |
 |
 |
Intrusion detection does require some horsepower. If you find your system sluggish, you might want to consider disabling the software. |
|
[edit] Security and Policy Rules
There are two different types of rules for the intrusion detection system. The Security rules detect issues related to overall system security, while Policy rules detect issues related to your organization's Internet usage policies. For example, the chat policy rules will detect instant messaging traffic that goes through your ClarkConnect system.
|
|
|
