IPS-4215 Placement

[Adam Frederick]

If funds only allow for one 4215(Network IPS) where would be the best place to locate it?

[#2]

Internet is the main source of attacks . So deploying it between the corporate network and Internet would be best option as per my knowledge.

[mhellman]

You might try to scrape up enough to get a 4240. It has four interfaces and supports virtual policies. So, you have a lot more flexibility in terms of what you monitor. You could monitor both Internet and internal traffic using different policies.