Intrusion Detection and Prevention

Putting a Firewall between your systems and the Internet means that 'doors' have to be opened to allow trusted movement in and out. i.e. other people and systems are allowed through your firewall to access servers e.g. mail servers. When these connections are made it is possible that they could be used by a hacker at the same time.

As with all security, prevention is far better than cure, and Intrusion Detection should be viewed as an essential line of defence as it gives you the opportunity to spot unwelcome activity before too much damage is caused. Intrusion Detection is not a totally straightforward tool as some skill is required in assessing information produced but it is in our opinion well worth the effort.