[Bro] Best set up practice

[Todd Carpenter]

Hi all,

Just joined the list and had a question … that I apparently sent to customer support ..oops.

anyways Im building a freebsd server and was wondering what the best practice / placement for bro would be

Essentially It’s a forward facing firewall based on freebsd. SO I was wondering if its best to deploy on the host OS, or create a jail or two and funnel traffic through that? I also wanted to know if there were any special considerations with jails / setup.

some options I came up with ..
 
internet > firewall > lan/dmz  
internet > firewall > nginx proxy > lan/dmz
internet > firewall > dmz jail > NO lan
internet > firewall > bro jail > proxy jail > lan/dmz

Thanks!