TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Hi James,
I'm not too sure what you're trying to do here.
The network engine will only monitor one NIC.
If you have two NICs, one for normal traffic (eg to the console) and
one plugged into the segment you want to monitor then the network
engine will only watch traffic on the NIC that you tell it to. You
would often set up one of the two NICs in "stealth mode" (eg unbind it
from TCP/IP) and get the network engine to monitor that one. Check
your sensor properties to find which NIC it is watching.
James
On Wed, 2 May 2001 16:36:53 +0800, you wrote:
>
>
>Hi support engineer,
>
>I finally find out some hints. Actually there are two NIC in our RS
>machine. One is connected to our internal network and the other is
>connected to the Internet hub. I have added a dummy IP in the Internet
>NIC. I now find that if I use a scanning tools like CyberCop or ISS to
>scan the dummy IP. The events are logged in the console (Including
>high, medium and low priority events). So, I suspect the engine seems
>cannot listen to the whole network segment for protection. It can only
>protect itself. Any ideas?? Please susgest. Thanks.
>
>
>
>
>
>
>
>Canif support <[EMAIL PROTECTED]> on 04/29/2001 12:08:59 AM
>
>Please respond to [EMAIL PROTECTED]
>
>To: James Lee/ITD/DHBG@DHBG
>cc: [EMAIL PROTECTED]
>Subject: Re: RealSecure stopped
>
>
>
>Have you tried stopping and starting the GUI, or at least
>disconnecting from and reconnecting to the sensor in question? Before
>that you could try 'netstat -na' on the sensor and see what
>ESTABLISHED sessions you have to ports 2998 and 901 or 902. It may be
>that you've lost the event channel.
>
>James
>
>On Thu, 26 Apr 2001 10:26:05 +0800, you wrote:
>
>>Our RealSecure 5.0 has stopped functioning yesterday, actually I
>>checked for anything wrong and find something as follow. I can
>applied
>>the latest policy to the sensor and receive the "changed
>>configuration" mail. I believe the network is ok. Also, one thing
>that
>>is most abnormal is that, I cannot see any high, medium or low alerts
>>display on the Realsecure console. As I remember that the normal
>>screen should continuously showing many alert message. Any
>>suggestion?? Please help. Thanks.
>>
>>James
>>
>
>
>
>
>
>
>
>
>
>This e-mail (and any attachment (s) ) is confidential and for use only by intended
>recipient(s). Access by others is unauthorised. Its content should not be relied
>upon and no liability or responsibility is accepted by us, without our subsequent
>written confirmation of its content. If you are not an intended recipient, please
>notify us promptly and delete all copies and note that any disclosure, copying,
>distribution or any action taken or omitted to be taken in reliance on the
>information it contains is prohibited and may be unlawful. Further information on
>the Guoco and Dao Heng Bank Groups is available from http://www.guoco.com and
>http://www.daoheng.com, respectively.
Email: [EMAIL PROTECTED]
=====================================================================
Disclaimer! All views are my own. I accept no responsibility for any
death, injury, damage, loss (financial or otherwise) or inconvenience
- whether caused directly or indirectly - resulting from the use of
information given or implied.
=====================================================================
