TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
There is a utility available on the RealSecure Technical Resource Center that can assist with partnering: http://www.iss.net/support/product_utilities/realsecure_tech_center/utilities/index.php Utilities File Name:ECPart.zip Description:The RS SiteProtector Event Collector Automated Partner-Failover script periodically checks the status of a Event Collector(EC) and automatically reassigns sensors to another EC if it is not online. Brian Fitch Systems Engineer Internet|Security|Systems -----Original Message----- From: Tom Renolds [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 06, 2002 8:24 AM To: Fitch, Brian (ISS Atlanta); [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: Partner Eventcollector Brian, I've read the same information as Erwin. I have loaded and am testing the SiteProtector 1.2 for a large-scale deployment (Network Sensors+Host Sensors=650+) and I have not seen an option for designating a "partner" Event Collector. I've included in our System Design Plan that Event Collectors are can be installed in "failover pairs" according to ISS documentation. If this is not true, I need to know it now, inform our client, and make documentation modifications. If this is a planned feature of SP 2.0 I'd appreciate someone at ISS confirming that fact. Bob Robert J. Craig, CISSP, SSCP Senior Security Analyst NETSEC 13525 Dulles Technology Drive Herndon, VA 20171 (703) 561-0420 (703) 832-4505 fax [EMAIL PROTECTED] www.netsec.net Your Network Security Solution. ======================================= This electronic message contains information from NETSEC or its affiliates, which may be confidential, proprietary or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named above for the purposes intended by the originator. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify us immediately by telephone at (703) 561-0420, or by electronic mail at [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Fitch, Brian (ISS Atlanta) Sent: Monday, August 05, 2002 5:35 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: RE: Partner Eventcollector TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ------------------------------------------------------------------------ ---- Sensors can only send data to one event collector at a time. Brian Fitch Systems Engineer Internet|Security|Systems -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, August 05, 2002 10:41 AM To: [EMAIL PROTECTED] Subject: Partner Eventcollector TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ------------------------------------------------------------------------ ---- LS, I want to use a second Eventcollector (which should run parallel with the first one and should collect data from the same sensors). I did some reading in the userguide of the Workgroup manager and read something about a partner event collector. Does anyone know if it is possible that the event collector and the partner eventcollector run parallel ? There is some documentation concerning partner event collectors, but i could not find if the two event collectors can run in parallel. (did find some statements which indicate that the partner will take over in case of problems) or is it better to set up another eventcollector (not configured as partner) ? Kind regards, Erwin Prummel
