IPS Policy Between 2 Trusted Networks

RE: IPS Policy Between 2 Trusted Networks

FormerMember — Mon, 15 Feb 2021 15:09:04 GMT

If you have control over both Zones and they're properly secured, Then it'll be okay if you don't apply any IPS policy between them. But in case if any attack originates in between trusted zones, then you won't be able to detect them on the Gateway level.

RE: IPS Policy Between 2 Trusted Networks

Farzan Barouj — Mon, 15 Feb 2021 15:00:05 GMT

So, you suggest me to keep the IPS policy between Trusted Zones.

RE: IPS Policy Between 2 Trusted Networks

FormerMember — Mon, 15 Feb 2021 14:53:03 GMT

Hi Farzan, This is a tricky scenario. If you've enough security measures taken to ensure the VPN zone machines are secure, You can probably get away without keeping any policy. I would suggest creating a custom IPS policy and include the signatures according to your resources which are being accessed.