TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Hi,
Does anyone have ISS Real Secure Network Sensor 5.0 working in a spanned
switch environment?
I'm using this configuration on a spanned switch, and I don't have any
problem. With two NICs:
- first one: IP address bound
- seconde: stealth mode for monitoring all traffic of a protected subnet
(intranet) connected via a HUP.
Thai-Hai DINH
University of Lausanne Computer Center / Security
Rte de Chavannes, 33 1007 Lausanne - Switzerland
mailto:[EMAIL PROTECTED] http://www.unil.ch/ci
tel: ++ 41 21 692 22 12 fax: ++ 41 21 692 22 05
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Ronald Petrucci
Sent: Friday, April 13, 2001 8:45 PM
To: KDouble
Cc: '[EMAIL PROTECTED]'
Subject: Re:
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
Ken
Yes ... we have done this .... with some difficulty ..... basically the port
used as the surveillance point needs to be customized
for port spanning in order to see all the traffic coming across. We have
set it
up using 2 NICs, one bound to IP on the inside
and the other in stealth mode monitoring all traffic.
Hope this helps
Ron
KDouble <[EMAIL PROTECTED]> on 04/11/2001 09:26:58 AM
To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
cc: (bcc: Ronald Petrucci/FTCI)
Subject:
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
Does anyone have ISS Real Secure Network Sensor 5.0 working in a spanned
switch environment?
Ken
