[Bro] Best, set up, practice

[Baxter Milliwew]

Try byhve ?



On Fri, Dec 9, 2016 at 10:22 AM, Todd Carpenter <tcarpenter604 at gmail.com>
wrote:

> Hi all,
>
> Just joined the list and had a question … that I apparently sent to
> customer support ..oops.
>
> anyways Im building a freebsd server and was wondering what the best
> practice / placement for bro would be
>
> Essentially It’s a forward facing firewall based on freebsd. SO I was
> wondering if its best to deploy on the host OS, or create a jail or two and
> funnel traffic through that? I also wanted to know if there were any
> special considerations with jails / setup.
>
> some options I came up with ..
>
> internet > firewall > lan/dmz
> internet > firewall > nginx proxy > lan/dmz
> internet > firewall > dmz jail > NO lan
> internet > firewall > bro jail > proxy jail > lan/dmz
>
> Thanks!
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161209/232fb8ef/attachment.html