RE: Switched network

Subject: RE: Switched network
From: Brian Laing (blaingiss.net)
Date: Fri Dec 03 1999 - 06:00:11 CST

• Next message: Crabtree, Martin: "RE: Switched network"
• Previous message: aliasiss.net: "(no subject)"
• Reply: Ray Honeycutt (HCS): "Re: Switched network"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

<919F9F0E43E8D111AFA40000F879E2F0D6E7mailsrv.szerencsejatek.hu>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
Sender: owner-issforumiss.net
Precedence: bulk
X-Loop: issforum

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any problems!
----------------------------------------------------------------------------

Istvan,

        To implement IDS into a switched environment careful attention needs to be
spent examining the flow of traffic, and once that is known more time spent
on how much of that traffic you wish to see. Once you know that where to
place the IDS is much simpler.
        The main targets points for monitoring in a switched environment, are
between switches, routers and individual machines. You can use any of the
following methods to monitor these connections. If your switch supports
mirroring or spanning of ports you can copy the traffic from the target port
to your IDS on another port. Another solution is the use of network taps.
A tap is a hardware device that can be inserted between two connections, and
copy the traffic off to your IDS. You could also use a Hub instead of a tap
in some solutions but I would not recommend it.

Brian

-----Original Message-----
From: owner-issforumiss.net [mailto:owner-issforumiss.net]On Behalf Of
Takács István
Sent: Tuesday, November 30, 1999 7:33 PM
To: 'issforumiss.net'
Subject: Switched network

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any
problems!
----------------------------------------------------------------------------

Hi,

First of all, thanks for the answers to my
'Database updates' question.

Next year we want to change to a switched internal network.
How will the RealSecure work in this kind of enviroment?
How can it monitor the whole network traffic?

Thanks in advance!

Regards,

Istvan Takacs
Network Manager
Hungarian Gaming Co.

• Next message: Crabtree, Martin: "RE: Switched network"
• Previous message: aliasiss.net: "(no subject)"
• Reply: Ray Honeycutt (HCS): "Re: Switched network"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b27 : Fri Dec 03 1999 - 14:18:20 CST