RVAsec 2019

Network Security Monitoring is an integral part of security defense.  Setting up Network IDS/IPS properly is critical to ensuring an organization’s NSM is efficient and effective.  I have learned quite a few lessons from my experience in the NSM realm: from properly sizing and architecting solutions to automating deployment and operations in a variety of environments.  I will also share lessons on working with Network teams to configure network components for NSM, setting up and operating NSM systems, and scaling NSM solutions to handle customer demands.  I will also compare Open Source Solutions to Vendor Solutions.  My goal for this presentation is for attendees to learn from my experiences in order to make informed decisions in their own environments.