Any ideas for a Linux based intrusion detection option
We have a Sonic Wall Firewall and I would like to add disturbance detection on the network. The principal of the company is asking about is there is any options that sit between the Firewall and network. We have the Sonic Wall subscribed to per-year licensing and I'm worried that will this activity slow down the Firewall performance.
Any ideas for a Linux based intrusion detection option which doesn’t require being configured as a Firewall.