TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Hi Chan, RS 7 will strip the VLAN tags from packets so that they can read them properly (we do something similar with our IDS Balancer) - but you need to be very careful if you want to use Kills (TCP RSTs) - because RS will not put the VLAN tags back on ! And so RSTs don't work The only true way of stopping attacks in VLAN environment is to block the IP packets with some sort of inline device. We have done some initial tests with Real Secure and our Attack Mitigator (an inline DDOS box) such that RS can send block commands to the Attack Mitigator, and so stop attacks in a VLAN environment. If you would like some more info let me know Cheers Simon ________________________________________________ Simon Edwards Technical Evangelist Top Layer Networks US Office : + 1 508 870 1300 (x230) US Mobile : + 1 617 953 8764 UK Office : + 44 1252 748509 UK Mobile : + 44 7971 959170 www: www.TopLayer.com email: [EMAIL PROTECTED] "Perfecting the Art of Network Security" ---------------------------------------------------------------------------- -------- -----Original Message----- From: Chan Kien Eng [mailto:[EMAIL PROTECTED]] Sent: 25 August 2002 21:41 To: [EMAIL PROTECTED] Subject: Realsecure in vlan TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- Hi all, >From the docs, it mentioned that RS 7.0 can monitor vlan. Can someone here kind enough to explain how it works and how to make it works? Thanks. ******************************************* Chan Kien Eng Security Consultant Evolution Security Solutions Sdn. Bhd. 15.09 Signature Office The Boulevard, Mid Valley City 59200 Kuala Lumpur. Email: [EMAIL PROTECTED] Tel: 603-22879939 Ext 110 Fax: 603-22879929 "Make it works, make it better" ********************************************
