This box is capable of monitoring up to 5 network segments. Is it advisable to use the same appliance (due to budget constraint)to monitor the external, DMZ and internal network ?
Using the multiple monitoring interfaces, you can provide simultaneous protection for multiple interfaces. If you are worried about possible security breach by connecting to multiple interfaces, I don't think that should be a problem since the traffic is not routed by the sensor. For additional information on sensor placement you could refer to http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/sensor/7016_04.htm#52942.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.