The internet is a scary place, and since building my own OPNsense router where I can see all of the traffic in and out, I've never been more convinced of that. I had already set up OPNsense with the ...

The next issue becomes selection of the appropriate IDS technology, which basically come in two flavours: network intrusion detection (NIDS or IDS) and host intrusion detection (HIDS).

Intrusion prevention systems — security tools designed to stop problems even before they crop up — have emerged as indispensable components of defense-in-depth security strategies.

The IDS device sits in promiscuous mode and listens to the network traffic passing by, and when something abnormal occurs, it sends alerts on the suspicious activity as defined by configured rules.

4. Consider using IPS for perimeter protection and possibly one or two critical network segments. Monitor other important segments with IDS. 5.