Bot detection software typically operates in a firewall, so if you buy in a botnet detection package, you should load it onto your gateway router or place it on a server that operates a filtering service, such as a cloud-based Firewall-as-a-Service. Bots typically operate from outside the network and direct traffic at the gateway or a Web server. This means that bot detection services operate at the boundary of the network. Nowadays, firewalls and proxy services typically already include botnet protection.