TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
How about putting the sensor just before the router that does the asymetric routing? There should be a point in your network where all traffic must go through before going outside that site to either one of the other two sites. You might have to have either more sensors or configure a switch to "span" all the ports you need. Neil Hi, Our network is designed with load balance and redundant. In many areas, there is split route or asymmetric route situation. RealSecure IDS sensors can only capture partial network traffic for same TCP session. So, I have a lot false positive alerts. I am looking for a solution to overcome this problem. I called ISS support, and was told there is no solution from ISS side. I wonder that maybe somebody has same issue and have a solution already. Thanks for any comments. Thanks -Shiming
