Are there any products that let you see and set IDS [Intrusion detection system] on router or any another hardware that is connected to the router?

All the ones I have found of them are Operating Systems like security onion, alien-vault, aanval. All of them are Linux distributions.

Is there not any another hardware IDS that I can connect to my router or is the router itself?

I ask that because it's much more easier than installing and operating virtual OS. It will also slow down the computer and the logs can be seen only by typing in the browser[for example].

closed as off-topic by Xander, TildalWave, RoraΖ, Bob Brown, schroeder Jan 23 '15 at 19:18

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

  • user53427 - that's 2 edits to try and make this on topic. – Rory Alsop Aug 7 '14 at 11:18
  • So, you're looking for a IDS appliance? There are as many of those as there are IDS vendors. – schroeder Aug 7 '14 at 14:39

Large enterprises typically use NIDS - network intrusion detenction devices ( http://en.wikipedia.org/wiki/Network_intrusion_detection_system ). These are usually on a span port on the switch so they don't impact latency. Alternatively you might go for NIPS - network intrusion prevention which must be inline on the network and therefore is likely to alter performance.


Yes, there are some appliances that incorporate wireless router + IDS or IPS. For example, check out this Watchguard access point.


If you mean by "hardware solution" that there is some specific chip that implements IDS algorithms (like an encryption chip for ciphering data), I am not aware that this is technically feasible. There is no standard algorithm for performing the intrusion detection, the goals of this task are manifold and so are the solution approaches. If you want to recognize malware, you will do this differently that when you want to detect malicious packets on the network.

Therefore, the best thing available will be an appliance like mentioned in the other post. Beware that IDS is never a "install and forget" method, but it requires maintenance. For example in rule-based IDS, the rules have to be updated to keep up with new threats. IDS using learning algorithms will have to be trained to accomodate new threat scenarios.

Not the answer you're looking for? Browse other questions tagged or ask your own question.