Question

3. Some users comment that setting up an IDS/IPS system is not an easy task. Why do you think it is the case? 4. If an IDS system produces a lot of false-positive alarms or a lot of false-negative alarms, what do you suppose it happens and how would you suggest to fix it? 5. Is it possible for an IDS system to produce a lot of false-positive and false-negative alarms in a short period of time and why?

Answer 1

Please Note: I have answered the first Question, according to HOMEWORKLIB RULES. Please Re-Post for receiving answers on the other questions.

3. Answer)
Yes, setting up the IDS/IPS in the network is not the easy tasks since there are different techniques for designing and setting up the rules for IDS/IPS. The following are the rules and techniques:
Where we are going to position the IDS/IPS on the network - Placing the IPS behind the firewall and thus adding the another layer of analysis remove the dangerous content. IDS scans the network traffic and is positioned internal to the network.
Configuration of Active directory with IDS/IPS is another task which is complicated.
Amount of traffic, types of traffic, number of connections and network complexity or size of network can add to the complicacy of the setup of IDS/IPS.
The setting should be implementing the relevant blocking rules for the IPS and IDS.

**Please Hit Like if you appreciate my answer. For further doubts on the or answer please drop a comment, I'll be happy to help. Thanks for posting.**