Source fire Sourcefire 3D System - Deploying in Multi-Site Environments

Version 5.2 Sourcefire 3D System Installation Guide 53
Understanding Deployment
Complex Network Deployments
Chapter 2
You can replace the firewall and the router with the managed device deployed on
that network segment.
Deploying in Multi-Site Environments
Many organizations want to extend intrusion detection across a geographically
disparate enterprise and then analyze all the IPS data from one location. The
Sourcefire 3D System supports this by offering the Defense Center, which
aggregates and correlates events from managed devices deployed throughout
the organization’s many locations. Unlike deploying multiple managed devices and
Defense Centers in the same geographic location on the same network, when
deploying managed devices in disparate geographic locations, you must take
precautions to ensure the security of the managed devices and the data stream.
To secure the data, you must isolate the managed devices and Defense Center
from unprotected networks. You can do this by transmitting the data stream from