The inside interface of the firewall needs to be plugged to a small hub with the real secure engine also connected to it. Or you can configure a port on the switch to mirror the port that the firewall interface is plugged into. The only problem with that is that you will not be able to communicate with the engine from a different host if it's on a mirrored port since they are usually one way.
We had a situation here where our network services put in a switch and did not let us, security, know about it. The detection went rather silent. We were communicating with the engine and could not understand what had gone wrong and why it was so quiet. Then a quick look on the wire with a sniffer revealed no traffic other than traffic destined for the host that had the engine.
-----Original Message-----
From: Tak�cs Istv�n [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 30, 1999 2:33 PM
To: '[EMAIL PROTECTED]'
Subject: Switched network
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Hi,
First of all, thanks for the answers to my
'Database updates' question.
Next year we want to change to a switched internal network.
How will the RealSecure work in this kind of enviroment?
How can it monitor the whole network traffic?
Thanks in advance!
Regards,
Istvan Takacs
Network Manager
Hungarian Gaming Co.
