Nokia on Sensor Placement

A network intrusion prevention solution typically consists of multiple sensors. Sensor placement within a network can greatly aid or hinder network security. As each enterprise operates differently, there is no single optimal approach.

Nokia Intrusion Prevention Solution consists of Sourcefire Intrusion Sensor for Nokia, Sourcefire Real-Time Network Awareness (RNA) Sensor for Nokia and Sourcefire Defense Center for Nokia. Intrusion and RNA Sensor location within a network directly affects the value of the information provided to the Defense Center.

Intrusion Sensors can either be deployed in Detection or Prevention modes.

Sensor placement decisions should take into account the usage of the sensors:

• Attack Detection
• Policy Enforcement
• Surveillance
• Network Problems

The correct placement of sensor is a key factor in ensuring a network's security. Different organizations have different networks and assets to protect. Understanding the organization's network and identifying the critical assets is the key to correct placement of the sensors.

Once the critical network segments and assets are determined it becomes crucial to place sensors on each of those network segments and close to the assets. This may mean investing in more sensors than planned leading to the ability to catch attacks and violations.