Remote Monitoring

[night8jim]

Hi,

I family member has open a office with about 60 PCs running in it, it has a basic network set up, with one router. He has asked what the best way about remote monitoring is, as there has been multiple attacks againts his network.

After a bit of research i came across the rmon protocols, is this the right sort of thing, can any one point me in the right direction? are the any recommened training courses to learn this like cisco?

Thanks

[PLOBBY]

What kind of monitoring are you looking for? To see if the network is up? Or to prevent attacks (firewall)?

[night8jim]

What kind of monitoring are you looking for? To see if the network is up? Or to prevent attacks (firewall)?

I want to prevent attacks. Is it possible to filter out bad traffic externally? Basically all there traffic would pass through an external firewall. So it can be monitors.

[SuperMiguel]

To monitor attacks an IDS system will do it, i like using snort. And for prevention an IPS Cisco IPS Sensor Software

[SuperMiguel]

look in here: http://netsecurity.about.com/od/intrusiondetectionid1/a/aafreeids.htm

[gangaskan]

To monitor attacks an IDS system will do it, i like using snort. And for prevention an IPS Cisco IPS Sensor Software

thats a fun one to setup :)

to the OP depending on what firewall you go with (if you do) you could do various things. juniper, cisco, sonicwall, etc, etc ... most companies make ids/ips solutions. juniper and sonicwall are probably the easier of the few i mentioned to configure, the cisco sutff is not so much, the NSA / ASA solutions are way different than the run of the mill router or switch in terms of commands and structure of the network inside the firewall.

i know sonicwall builds in alot of features in their product, along with juniper too. with contracts you can force people to install AV and keep it up to date in order to access the internet, and even content filtering to weed out porn, warez, or any specific category (dining, auctions, sports, or social networking for example)

[SuperMiguel]

thats a fun one to setup :)



fun as spending 5 days with out sleep trying to set it up :)

[gangaskan]

fun as spending 5 days with out sleep trying to set it up :)

so true. i was super confused when i started working on cisco pix's / security appliances

i do like the idea of not having to use "do" when exectuing a command thats in global config

[SuperMiguel]

so true. i was super confused when i started working on cisco pix's / security appliances

i do like the idea of not having to use "do" when exectuing a command thats in global config

you will hate it!!! but then you will love it :)