Nortel Softphone 2050, Installation Manual

Page: 9 / 57

N
ORTEL
TPS 3D S
ENSOR AND
D
EFENSE
C
ENTER
I
NSTALLATION
G
UIDE
R
ELEASE
4.7.0
PAGE
9
Chapter 1: Before you begin
internal network. Generally, all internal networks are ideal locations for the
combined capabilities of IPS, RNA, and RUA.
IMPORTANT! These three locations indicate where you may want to connect the
3D Sensor’s sensing interfaces. Regardless of where you connect the sensing
interfaces, make sure you connect the 3D Sensor’s management interface to a
secure internal network that is protected from unauthorized access.
Outside the firewall
Outside the firewall, the router provides the first line of defense. Although you can
configure most routers to block unwanted packets, this is not typically used to
secure the network segment between the router and the firewall. Placing the 3D
Sensor here can help you detect attacks made against your network as well as
attacks from your network to another.
Deploying the 3D Sensor on this segment of your network for a week or two can
help you understand what kinds of attacks reach your firewall and where they
originate. Although you can readily inspect all traffic traversing your network,
considerable resources are required to prioritize, investigate, and respond to
events that may be blocked by your firewall. Your enterprise’s ability to gain
knowledge from this approach depends on the amount of traffic traversing your
network and your security analyst resources. Gaining this kind of information can
help you tune your firewall rules to be as effective as possible.