CIS Passive Network Sensor Placement

Amidst an increasingly encrypted internet, you need to ensure the efficacy of your passive network sensor deployment. Where and how you place your network sensors is important not only for detecting malicious traffic, after all. It's also critical for ensuring that your sensors don't interact with traffic and inadvertently cause network performance issues.

Fortunately, you don't need to explore these considerations on your own.

In partnership with MIT Lincoln Laboratory, the Center for Internet Security® (CIS®) conducted research around passive network sensor placement. Our guide includes best practices and recommendations, including a diagram on improving sensor placement and information on your options. These architectural considerations will help you to reduce false positive detections and ensure your sensors cannot interact with network traffic.