Did you setup a port mirror on the switch the IPS was connected to to mirror 
traffic to the device?

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ibrahim Alsharif
Sent: Tuesday, April 22, 2008 4:47 AM
To: [email protected]
Subject: [c-nsp] IPS 4240

hello Guys,

I have 2 IPS to install in a network those 2 IPS i should install them in 
promiscuous mode for testing then change their work to inline mode

according to inline mode i tried it in a lab environment and it did work fine, 
but in promiscuous mode i couldn't get any events on the sensor
with the knowledge that the sensor interface that is connected to the network 
is in sensing mode & it's promiscuous,

so please advice what to do & where should I put the IPS in my topology.

thanks,


      
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile.  Try it now.  
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Note: This message and any attachments is intended solely for the use of the 
individual or entity to which it is addressed and may contain information that 
is non-public, proprietary, legally privileged, confidential, and/or exempt 
from disclosure.  If you are not the intended recipient, you are hereby 
notified that any use, dissemination, distribution, or copying of this 
communication is strictly prohibited.  If you have received this communication 
in error, please notify the original sender immediately by telephone or return 
email and destroy or delete this message along with any attachments immediately.

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to