8.2. Network and Host Intrusion Detection

Your EnGarde Secure Linux server includes a WebTool-enabled Snort network intrusion detection system. Just select Intrusion Detection Systems from the System menu, then select the Network IDS submenu and designate the interfaces and services you wish to monitor.

You may also at your option install and configure the open source AIDE host intrusion detection system. To install AIDE, use the Guardian Digital Secure Network's Package Management module as described above in Chapter 7. Once installation is complete, you can initialize AIDE and begin monitoring your system for suspect changes by selecting the AIDE Host IDS menu from the Network IDS menu and clicking the Initialize IDS Database button.