TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
We are in the process of designing our IDS network to monitor our entire network. We are planning to install one or more NIDS and/or HIDS in several regions troughout our company. As such, we want any events reported in one region to be routed to the local NOC in that region to monitor those events as well as sending the events to a main console that is centrally located to our security staff. We would like to set up an Event Collector in each region such that the sensors in the region will report to the local EventCollector and the EC would report the events to a common Enterprise database, as well as consoles located both centrally and in the region. We would guess that the central console would have to be setup to monitor events from multiple EventCollectors in order to be able to do this. Is it possible in RS 6.0 to have one console connected to multiple Event Collectors and EventCollectors reporting to multiple consoles? Secondly, can network and host sensors report to multiple Event Collectors? Thanks Dan Wangler, GIAC Certified Intrusion Analyst IT Security Response Team, Texas Instruments, Inc. Spring Creek Bldg 1, C196, 6500 Chase Oaks, Blvd, MS 8417, Plano, Texas, 85023 Tel #; 214-567-8304; Email:; [EMAIL PROTECTED] Dan Wangler, GIAC Certified Intrusion Analyst IT Security Response Team, Texas Instruments, Inc. Spring Creek Bldg 1, C196, 6500 Chase Oaks, Blvd, MS 8417, Plano, Texas, 85023 Tel #; 214-567-8304; Email:; [EMAIL PROTECTED]
