Where is the best place on the network to put a Dragon Sensor?
The best place to put sensors is in key areas of your network. So you might want one in front of the firewall, so you know exactly what you are being hit with. One behind the firewall to detect traffic you have allowed through. If you are using a VPN you want one behind the machine that decrypts the traffic, as the sensor can’t read encrypted packets. This one can be used to see what traffic ‘trusted’ people are sending you. Then you could have sensors in front of the boxes that you offer services on such as a web or FTP server. • Why? The more sensors the more things you can look for and sensors in certain areas can be made to look for different things. For example, there is no point in having a sensor behind a firewall detecting things you know can’t get through the firewall or a sensor in front of the web server that only needs to detect web exploits.
