TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Well the engineeringlimit is 250 but no human can sit before a console with
250 sensors reporting events.
The maximum for a human depends on the policy and type of sensors, if the
netsensor is in the DMZ or before the FW you won't add 50 of them but rather
10. If you log everything to Database and the less displayevents as possible
you can arrive at 50.
So it depends on type, netsensor or serversensor, and policysettings (number
of displayevents/number enabled signatures).
-----Original Message-----
From: Chris H Mahn [mailto:[EMAIL PROTECTED]]
Sent: woensdag 16 mei 2001 13:26
To: Hall, Suzanne (Contractor)
Cc: 'Alfonso Farje'; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: Number of Sensors monitored from a single Real Secure
console (Wo rkGroup Manager)
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
I'm sorry, did you say 50? Are you talking host sensors or network sensors
or a combination? My understanding is they recommend no more than 15
sensors, which is just about right.
I'm using network sensors, and when I start getting near 15 sensors on a
console it gets to be too much information. I have know idea what 50 would
look like.
Chris Mahn
Duke Energy IT Security Services
704 382-8072
"Protecting What We Generate"
"Hall, Suzanne
(Contractor)" To: "'Alfonso Farje'"
<halls@ritchie <[EMAIL PROTECTED]>,
[EMAIL PROTECTED]
.disa.mil> cc:
Sent by: bcc:
owner-issforum Subject: RE: Number of Sensors
monitored
@iss.net from a single Real Secure console
(Wo
rkGroup Manager)
05/15/01 07:36
AM
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
ISS has recommended to us that we monitor no more than 50 sensors per
console. You can do more, but 50 seems to work well.
Suzanne Hall
DSN 570-9830
Comm (717) 267-9830
email: [EMAIL PROTECTED]
-----Original Message-----
From: Alfonso Farje [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 10, 2001 3:03 PM
To: [EMAIL PROTECTED]
Subject: Number of Sensors monitored from a single Real Secure console
(Wo rkGroup Manager)
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
Hello all,
I know that the number of devices that can be supported from a single
console depends on the traffic that the sensors are listening but, in
average, does anybody know there is a recomended maximun number of devices
that can be monitored from a single console?
Does anybody monitor a big number of Network Sensors from a single console.
I only want to monitor 15 Network Sensors and 50 Server Sensors on a
relatively noisely 100 Mb network, burt the number of sensors could grow in
a short period of time. Please any idea?
Thanks.
Alfonso R. Farje Tong
Ingeniero e-Security
Cosapi Soft S.A.
We Secure the Internet
Av. Javier Prado Este 4491 Surco
Telef: (511) 3133200, Anexo 233. Cel: (511) 81.22609
[EMAIL PROTECTED]
