Hi folks. We have OSSEC installed inside our network (working really well!) but we'd like to extend it into a DMZ.
Our preferred method is to have a "server" instance in the DMZ with agents reporting to it and then have that server instance reporting back to our main OSSEC server inside the network. We'd prefer outbound connectivity only (from the Internal server to the DMZ server) if possible but could live with the DMZ server connecting back to the internal server if we have to. What we're trying to avoid is having all the agents inside the DMZ talking back individually to our internal server. Anyone have a clue for me? ciao dave -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
