New answers tagged ids
1
This depends on a lot of factors, like: vendor of the IDS, the settings, which signature is being triggered and what kind of attack is being initiated. In short yes, UTMs of the common vendors (CP, Fortinet, PANW) all store a copy of the traffic in memory for analysis.
For instance, you could configure in an IDS that a RDP Brute-force attack is only flagged ...
Top 50 recent answers are included
