OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Chan Kien Eng (eng_at_essasia.net)
Date: Mon Jul 29 2002 - 04:30:47 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
    majordomoiss.net Contact issforum-owneriss.net for help with any problems!
    ----------------------------------------------------------------------------

    Hi all,

    Lets say I have the configuration like this.

    Company A has 3 branches and each branch has 1 Network sensor and 1
    server sensor. All the branches' IDSs are connected to the RS Consoel
    which situated at the HQ. The branch connect to HQ through internet.
    Thus, IDS management are done thru the HQ using the internet line.

    The internet line from the HQ to internet is not reliable and always
    down. Thus, the IDS can't send the event to the console. So, company A
    plan to get another ISP for the failover.

    The question is, can this idea work? Coz the IDS reporting to the
    console based on the Console IP address. So, if the first ISP is down,
    switching to 2nd ISP would not provide failover because the IP address
    assigned by two ISP is difference.

    Any idea guyz?

    Thanks

     

    *******************************************
     Chan Kien Eng
     Security Consultant
     Evolution Security Solutions Sdn. Bhd.
     15.09 Signature Office
     The Boulevard, Mid Valley City
     59200 Kuala Lumpur.
     Email: engessasia.net
     Tel: 603-22879939 Ext 110
     Fax: 603-22879929
     "Make it works, make it better"
    ********************************************