Re:Achieving 100Gbps intrusion prevention on a single server
by yencabulator on Sunday November 13, 2022 @10:45AM
(#33584052)
> One could argue, "hey d*ckhead we're going to normalize the traffic first" the problem is what is normal?
This is why this kind of IPS integrates with a firewall well. Two decades back, my team built very fast for its day firewall that would only let assembled-and-refragmented fragments through.
There was no confused ordering past the firewall, and no scenario of IDS/IPS and victim defragmenting differently.
This is why this kind of IPS integrates with a firewall well. Two decades back, my team built very fast for its day firewall that would only let assembled-and-refragmented fragments through.
There was no confused ordering past the firewall, and no scenario of IDS/IPS and victim defragmenting differently.