Can anybody share experience with traffic decryption on IPS? As a best practice is it implemented? I'll place IPS in Internet Edge part of network and it will be as a second filter from different vendor for the main firewall. My question is - do you implemented traffic decryption in such situation? We'll have decryption on several other points - on the web proxy, on the email gateway, on the web application filter. We are looking at the Cisco FirePower/FTD appliances, working in interface pair inline deployment (without changes of L2 or L3).
No comments:
Post a Comment