Virtualization - OS, Firewall, RAS/NAS, IDS/IPS on one system?
Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Virtualization - OS, Firewall, RAS/NAS, IDS/IPS on one system?
Hi all,
I am interested in a solution for an All-in-One package for security. Is it possible to group a firewall, RAS/NAS, IDS/IPS into one system? Today, systems have the memory capability for making an entry point into such a Virtualization system. The system could group all the security services.
I have heard of OS distros that are all in one package, but are there any like what I have described?
I am also interested in home apps, system Virtualizations, or OS distros. I am a newbie to security so please be thorough.
Yes, it can be done (although whether it's a good idea or not is a separate issue). You'll likely need to set it all up yourself, though, as I don't think there's currently a distro that provides the setup you have in mind out of the box.
If you haven't look at it yet, a good place to start would be here in the security references. Is there a specific area of security that interests you or a topic that you would like to discuss in more detail?
Check out ClearOS (formerly Clark Connect) as it does much of what you are looking for, but not virtualization last time I checked.
I don't know how well a virtualized server would act as an IDS/IPS system since they are generally setup with one NIC in promiscuous mode to capture all traffic on the network. Your host would need to have sufficient NICs to split off for all of the features you want, as well as be running a virtualization software that would allow the VM to then actually have direct access to the hardware to set it up.
I don't know how well a virtualized server would act as an IDS/IPS system since they are generally setup with one NIC in promiscuous mode to capture all traffic on the network.
Isn't it just a matter of bridging the virtual/physical NICs?
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.