1
Intrusion Detection and Prevention / IDS or IPS for School Firewall [SOLVED]
« on: April 25, 2018, 11:18:17 pm »
Hi,
Am new to opnsense (coming from other sense), and so far I lie it, but I need a little guidance or IDS versus IPS, I am having trouble understating which would be better for my setup. The setup is as follows:
Private school with around 180 students and 27 staff. Internet is 500Mbs up and down (Centurylink FiberPlus). Each student has a tablet or chromebook and teachers have either a desktop or laptop. There is one server (Windows 2016) with a CentOS 7 vm that runs OTRS helpdesk which will be internet facing. Based on this, do I need IDS/IPS and if so, which rulesets make the most sense to start off with?
The firewall hardware is a Partaker 1u i5-3317u with 6 Ethernet, 4GB Ram and 128 SSD.
I have used snort on the other sense, but I just enabled at the ETs, which was probably not smart, but it seems that what most suggested. Any input/advise would be very helpful.
Thanks in advance
Am new to opnsense (coming from other sense), and so far I lie it, but I need a little guidance or IDS versus IPS, I am having trouble understating which would be better for my setup. The setup is as follows:
Private school with around 180 students and 27 staff. Internet is 500Mbs up and down (Centurylink FiberPlus). Each student has a tablet or chromebook and teachers have either a desktop or laptop. There is one server (Windows 2016) with a CentOS 7 vm that runs OTRS helpdesk which will be internet facing. Based on this, do I need IDS/IPS and if so, which rulesets make the most sense to start off with?
The firewall hardware is a Partaker 1u i5-3317u with 6 Ethernet, 4GB Ram and 128 SSD.
I have used snort on the other sense, but I just enabled at the ETs, which was probably not smart, but it seems that what most suggested. Any input/advise would be very helpful.
Thanks in advance