TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
If your NE is running in stealth mode, is there any possibility that the box could be
compromised? ISS says that if there is no IP bound to the NIC then an intruder should
not be able to detect its presence.
At a SANS conference, I heard otherwise, so what's the real deal on this issue?? Our
network people think that since the box is in promiscous mode, then it is not
necessary to harden the box. I think it is important to hardent the box,
but I need some valid reasons as to why this should be done. Anyone have any ideas
that I could present to them (besides the risk of internal attacks to the IDS).
Thanks again,
Mark
