TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any problems!
----------------------------------------------------------------------------

An other solution is to use a second tap to feed the KILL back to the
switch. All you need to do is place a tap inline with the monitoring
interface of your IDS and take the monitor output of the tap and feed it
back to the switch.

There is an exlanation of this in a ISS document called switched.zip in the
support pages of there web site.
Here's the link
http://www.iss.net/support/product_utilities/realsecure_tech_center/tips_tri
cks/index.php

---------------------------------------------------------
Benoit Savard
Security Consultant
Alphamosaik.com

----- Original Message -----
From: "Palmer, Paul (ISSAtlanta)" <PPalmeriss.net>
To: "'Ryan Krukoski'" <RKrukoskinetcyclops.com>; <gossandonovared.cl>;
"Vicente, Joao (ISS Latin America)" <jvicenteiss.net>; <issforumiss.net>
Sent: Friday, June 07, 2002 5:13 PM
Subject: RE: Question about NetOptics TAPs

>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
to
> majordomoiss.net Contact issforum-owneriss.net for help with any
problems!
> --------------------------------------------------------------------------

--
>
> Ryan
>
> RealSecure 7.0 is capable of sending RS Kill packets out an interface
other
> than the one monitored. Previous versions always sent the RS Kill packets
> out the monitored interface.
>
> Paul Palmer
> ISS
>
> -----Original Message-----
> From: Ryan Krukoski [mailto:RKrukoskinetcyclops.com]
> Sent: Friday, June 07, 2002 6:38 AM
> To: gossandonovared.cl; Vicente, Joao (ISS Latin America);
> issforumiss.net
> Subject: RE: Question about NetOptics TAPs
>
>
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
to
> majordomoiss.net  Contact issforum-owneriss.net for help with any
> problems!
> --------------------------------------------------------------------------
--
>
> The Net Optics taps work great for Network Sensors but there is no way
> to insert a packet into the stream.  I do believe that RealSecure has
> the ability to send the RealSecure-TCP_Kill via the Management
> Interface.  Can someone verify this?  I hope that this helps.
>
> Ryan
>
>
> -----Original Message-----
> From: Gustavo Ossandon S. [mailto:gossandonovared.cl]
> Sent: Thursday, June 06, 2002 12:34 PM
> To: 'Vicente, Joao (ISS Latin America)'; issforumiss.net
> Subject: Question about NetOptics TAPs
>
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
> to
> majordomoiss.net  Contact issforum-owneriss.net for help with any
> problems!
> ------------------------------------------------------------------------
> ----
>
> Hello everybody
>
>
> I've just know about this devices
>
> http://www.netoptics.com/net-96135.html
>
> Seems to be really wonderfull for monitoring and Snifing
>
> The question is if they support put Network Sensor TCP_Kill on the wire
>
> Have Anyone tried one of this ....
>
> Thanks for your feedback
>
> Gustavo
>
>
>
>
>
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]