security and intrusion detection

[stevent]

I have two sites connected to the internet via frame-relay, what security measures can i implement on the serial interfaces?

Is there some way i can monitor the connections?

[jsirrian]

You can consider access control lists or the IOS Firewall Feature Set (which has 59 IDS signatures in it) if you can only implement security on the serial side. To implement a more full featured, robust IDS (to monitor traffic) or firewall, you really need to look on the LAN side of the router. This really depends upon your risk tolerance and policy.

[durnie]

ACL 's on the serial interfaces will provide for some security. You could use MRTG as a way to provide metrics for reporting.