[Oisf-users] Suricata - Reject in one-arm IPS/IDS mode

[Cooper F. Nelson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

+1 to using a web proxy.  Squid is free.

You can even run suricata inline on a squid proxy and create a robust,
next-generation proxy-firewall with Layer-7 intrusion
detection/prevention.

- -Coop

On 3/23/2015 9:17 AM, Rodgers, Anthony (DTMB) wrote:
> Why not use a web proxy like squid for this?
> 
>  
> 
> --
> 
> Anthony Rodgers
> 
> Security Analyst
> 
> Michigan Security Operations Center (MiSOC)
> 
> DTMB, Michigan Cyber Security
> 

- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJVEGJiAAoJEKIFRYQsa8FW3r0IAMqQg8MAiFsEvtQVDDKguCVs
lhSpi3BWo6o4ZSvAVb0TBckzbIybS/H2EKDygSYabNwxCpjMf0Lu2OrJVKy2RVKS
+eawDcvztSWDyg2HhMaznpv3XcNjvMhU3HG59k2/0T0YNi7Y5YTMS+QmFAsuJzX+
+SWBMttonPIwDste0ArhMBOBmL5zi3azz5Bt066WAu6sdTfFqXXh7pzV2aEgocLH
V+o2CdubRdyAjNQNRlZ8rxJ1Xab6ZUYwp25BfUSyC11pShQt31ojnjleZARBY7JQ
Sa639d06f7Vd6IjsiukR8RUF6ImhR6oxQhrYgFx2kXCyCnuAiAm/1m7EaS6Yz/A=
=8UL5
-----END PGP SIGNATURE-----