Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NFR Wizards Archive: future of IDS

future of IDS

Colin Campbell (sgcccdccitec.qld.gov.au)
Thu, 15 Oct 1998 12:24:24 +1000 (EST)


(may show some ignorance here so be gentle :-)

Our firewall sits between two networks. The "external" houses lots of
internet-visible web servers, much as one would expect. The internal net
houses intranet servers. Up until recently, these nets were just plain old
hubs. They also suffered from consistent 10% collision rates. Everyone was

Consequently, we replaced these hubs with switches. Network performance is
great. No collisions, the machines that can talk at 100Mb do, all is well
with the world. Well, almost. I tried snooping some traffic between two
machines and when I saw nothing, the difference between hubs and switches
suddenly dawned on me.

Now, after all this preamble, I do actually have a question for the great
minds to ponder. With the likelihood that more and more hubs are going to
disappear and be replaced by switches, where does that leave the humble
IDS that can no longer see all the traffic it needs to, to do its job?


This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:11:57 CDT