Remote Monitoring

Hi,

I family member has open a office with about 60 PCs running in it, it has a basic network set up, with one router. He has asked what the best way about remote monitoring is, as there has been multiple attacks againts his network.

After a bit of research i came across the rmon protocols, is this the right sort of thing, can any one point me in the right direction? are the any recommened training courses to learn this like cisco?

Thanks

What kind of monitoring are you looking for? To see if the network is up? Or to prevent attacks (firewall)?

PLOBBY said:

What kind of monitoring are you looking for? To see if the network is up? Or to prevent attacks (firewall)?

Click to expand...

I want to prevent attacks. Is it possible to filter out bad traffic externally? Basically all there traffic would pass through an external firewall. So it can be monitors.

To monitor attacks an IDS system will do it, i like using snort. And for prevention an IPS Cisco IPS Sensor Software

look in here: http://netsecurity.about.com/od/intrusiondetectionid1/a/aafreeids.htm

SuperMiguel said:

To monitor attacks an IDS system will do it, i like using snort. And for prevention an IPS Cisco IPS Sensor Software

Click to expand...

thats a fun one to setup

to the OP depending on what firewall you go with (if you do) you could do various things. juniper, cisco, sonicwall, etc, etc ... most companies make ids/ips solutions. juniper and sonicwall are probably the easier of the few i mentioned to configure, the cisco sutff is not so much, the NSA / ASA solutions are way different than the run of the mill router or switch in terms of commands and structure of the network inside the firewall.

i know sonicwall builds in alot of features in their product, along with juniper too. with contracts you can force people to install AV and keep it up to date in order to access the internet, and even content filtering to weed out porn, warez, or any specific category (dining, auctions, sports, or social networking for example)

gangaskan said:

thats a fun one to setup

Click to expand...

fun as spending 5 days with out sleep trying to set it up

SuperMiguel said:

fun as spending 5 days with out sleep trying to set it up

Click to expand...

so true. i was super confused when i started working on cisco pix's / security appliances

i do like the idea of not having to use "do" when exectuing a command thats in global config

gangaskan said:

so true. i was super confused when i started working on cisco pix's / security appliances

i do like the idea of not having to use "do" when exectuing a command thats in global config

Click to expand...

you will hate it!!! but then you will love it