If I could only have one sensor, I would put it on the outside, before my firewall. That way the IDS could potentially catch attacks against my firewall, as well as other attacks. However, I would argue for a larger budget to procure a few more sensors.
For more information on this topic, visit these other searchSecurity resources:
Best Web Links: Firewalls
Best Web Links: Intrusion Detection
Best Web Links: Budgeting for Security
Dig Deeper on Network intrusion detection and prevention (IDS-IPS)
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.