-
Book Overview & Buying
-
Table Of Contents
SOC Analyst Career Guide
By :
For this section, you will use Snort, which you previously set up in Chapter 6. Snort can be configured as an inline firewall and Intrusion Prevention System (IPS) to stop network-based attacks. You will need to have the Ubuntu host as well as the Kali Linux host ready to conduct this lab. For this lab, I also increased the cores on the Ubuntu host to 4 and added 2 GB of extra RAM to help with resource consumption due to handling firewall rules. Next, you will discuss how to configure the lab.
The first step is making sure both hosts are on the same NAT VMnet. You will need to go to Edit and then Virtual Network Editor to begin to make changes to your VM’s virtual network. Next, make sure the Ubuntu host has a separate bridged or NAT network interface. This will allow the host to take traffic from the NAT environment to the hypervisor and the internet. This will also make the Ubuntu host the first stop for all internet...