You can install a RealSecure Server Sensor on a box that has Network Sensor(s), but the Server Sensor must be installed without the network monitoring components.
This is documented in the Network Sensor Installation Guide at http://documents.iss.net/literature/RealSecure/RS_NetSensor_IG_7.0.pdf on PDF page 9 Here's the excerpt: "You can also install server sensor on the same computer to provide additional protection and to concurrently monitor your network." Brian Fitch Systems Engineer Internet|Security|Systems -----Original Message----- From: Larson, Jeffrey [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 03, 2002 2:23 PM To: ISS Forum (E-mail) Subject: [ISSForum] Installing HIDS on a NIDS Server We currently use 'hardened' W2K servers for our Real Secure Network Sensors. I was wondering the opinion of the forum on installing Real Secure Server Sensor on the boxes that the Network Sensors are running. I know from my experience in training that during installation you are warned against running both sensors on the same box unless you are in a lab setting. I am concerned that our NIDS servers are unprotected even though we have harden them as much as you can a Microsoft product. Has anyone tried this configuration with success? Are there alternative HIDS products that I can use on these boxes if this proves impractical? Thank You, Jeffrey Larson Senior LAN Technician Michigan Millers Mutual Ins. (517) 371-7726 CCNA Network+ <mailto:[EMAIL PROTECTED]> ############################################################################ ############################### This e-mail and any files transmitted with it may contain confidential and/or proprietary information. It is intended solely for the use of the individual or entity who is the intended recipient. Unauthorized use of this information is prohibited. If you have received this in error, please contact the sender by replying to this message and delete this material from any system it may be on. ############################################################################ ################################# _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
