TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Hello Dennis, The installation is done as two separate installations of network sensor on the computer. Each sensor will have a separate name. Install one instance of RealSecure Network Sensor giving the first NIC a name and then install a second instance of Network Sensor using a different name. This should allow you to put two stealth NIC's into one box. The only advantage to running more than one sensor on a machine is to save money. However, for a busy segment I would recommend spending the extra money and getting two machines for better performance. Regards, ======================================= Brian R. Campbell Technical Support Engineer. Internet Security Systems -The Power to Protect- My hours are Tuesday through Saturday, 12am-9am Eastern Standard Time. Should you require immediate assistance while I am out of the office, please contact Technical Support directly at 1-888-447-4861 or (404)236-2700 RealSecure Advanced Training is Here!!! http://www.iss.net/secureu/advanced/ > Upgrading to RealSecure v6.0? > ISS SecureU announces the NEW "Migration to RealSecure(tm) 6.0 and New Product Features" Course > Click here: http://education.iss.net/course_descriptions/iss_courses/real_secure55diff60 .php Request a Knowledgebase Account http://www.iss.net/customer_care/knowledgebase/register.php ======================================= -----Original Message----- From: Dennis [mailto:[EMAIL PROTECTED]] Sent: Saturday, December 15, 2001 4:39 AM To: [EMAIL PROTECTED] Cc: ISS Technical Support Subject: 489489 RS sensor in stealth mode Hi, I have a multihomed network sensor running on WIN2K.The sensor has two of the NIC's running in stealth mode and the other has an IP address( for management from the console).Each NIC terminates on a sepreate VLAN on two different switches. Here's the setup: server VLAN---------SWITCH------>FW<-------------SWITCH--------DMZ VLAN | | | Nic1 Nic2 | |________Sensor______________| | in stealth mode NIC3| |_______CONSOLE I have mapped the each of the NIC ports on the SW's to sniff all traffic from the respective FW interfaces. The problem is that on the console, i'm able to sniff/receive traffic from only the DMZ VLAN and not the SERVER VLAN. I tried swapping the NIC cards...Also tried to keep the other NIC in stealth mode.....without any breakthrough. Is it that the Sensor is bound to a NIC during installation and cannot have more than one NIC's running in stealth mode? Solutions will be appreciated. Thnks, Dennis Francis Bangalore Labs,India Tel: +91-22-6603080 Mob: +91-98204-29365 www.bangalorelabs.com 'Internet Infrastructure Managers'
