Network IDS

• Can I apply filters on network traffic?
• Do I need an Alert Logic appliance to collect threat traffic?
• How frequent and what size are the IDS signature updates that are sent to Alert Logic appliances?
• How long does Alert Logic keep event and incident data?
• What are the definitions of event classifications?
• What AWS instance types are supported by Alert Logic?
• What can the Alert Logic network intrusion detection system block?
• What ciphers does Alert Logic accept?
• What is the Alert Logic Decryptor?
• What is the difference between a tap and a SPAN?
• What is the maximum duration that can be set for quick block and policy blocking?
• What methods can be used to monitor network traffic?
• Where can I find evidence for my auditor that my IDS configuration is up to date?

• Can I apply filters on network traffic?
• Do I need an Alert Logic appliance to collect threat traffic?
• How frequent and what size are the IDS signature updates that are sent to Alert Logic appliances?
• How long does Alert Logic keep event and incident data?
• What are the definitions of event classifications?
• What AWS instance types are supported by Alert Logic?
• What can the Alert Logic network intrusion detection system block?
• What ciphers does Alert Logic accept?
• What is the Alert Logic Decryptor?
• What is the difference between a tap and a SPAN?
• What is the maximum duration that can be set for quick block and policy blocking?
• What methods can be used to monitor network traffic?
• Where can I find evidence for my auditor that my IDS configuration is up to date?