But, if you send RSKILL through a manager nic, you can have problems with anti-spoofing and routing. Is possible but the best way would be to install a third nic.
[]�s Antonio Gomes CONTACTA Seguran�a em Conectividade Fone: +55 21 2253-9349 Nokia Security Administrator ----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 07, 2003 5:30 AM Subject: RE: [ISSForum] Proventia ports ? > Yes you can choose which card to use to send RSKILL, just right click the > sensor and in the properties adapters change the Adapter to Send Kills. > > Kind regards > > Christo de Beer > Information Specialist Sr > EDS South Africa > > Phone: +27 11 239 2616 > Fax: +27 11 239 2555 > Mobile: +27 82 453 8183 > > E-Mail: [EMAIL PROTECTED] > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: 05 July 2003 14:21 > To: [EMAIL PROTECTED] > Subject: Re: [ISSForum] Proventia ports ? > > The network sensor has two network card, one is connected to span port, one > is for nomal IP connection. Why need third network card? Can the sensor > send RSKILL through the second card ? > > Thanks > > Ruihai > > -------------------------- > Sent from my BlackBerry Wireless Handheld > > > > ----- Original Message ----- > From: issforum-admin > Sent: 07/03/2003 07:48 PM > To: <[EMAIL PROTECTED]> > Subject: Re: [ISSForum] Proventia ports ? > > In some types of switch (the bigs) when you configure one port to work how > "span", this port is unable to send packages. > > therefore, the RSKILL failure > > The solution is to install a third NIC for send RSKILL > > []�s > > Antonio Gomes > CONTACTA Seguran�a em Conectividade > Fone: +55 21 2253-9349 > Nokia Security Administrator > ----- Original Message ----- > From: <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, July 03, 2003 1:54 PM > Subject: Re: [ISSForum] Proventia ports ? > > > > I have problem with RSKILL in our Cisco switched network, we use 6513 and > 2948. Can you explain whysome type of switch does not suppor RSKILL? > > > > Thanks > > > > Ruihai > > > > -------------------------- > > Sent from my BlackBerry Wireless Handheld > > > > > > > > ----- Original Message ----- > > From: issforum-admin > > Sent: 07/03/2003 12:25 PM > > To: [EMAIL PROTECTED]; y.com>, <[EMAIL PROTECTED]> > > ����^ > > e; boundary="=_alternative 0059078485256D58_=" > > > > This is a multipart message in MIME format. > > > > > > > > > > > > Subject: Re: [ISSForum] Proventia ports ? > > > > I think the big switchs don't support this feature, bigger than 5500 > > catalyst. In 2900 series the RSKILL works well. > > > > []�s > > > > > > Antonio Gomes > > CONTACTA Seguran�a em Conectividade > > Fone: +55 21 2253-9349 > > Nokia Security Administrator > > > > > > ----- Original Message ----- > > From: "Mohamed HAMOUCH" <[EMAIL PROTECTED]> > > To: "Antonio Gomes - Contacta" <[EMAIL PROTECTED]>; > <[EMAIL PROTECTED]> > > Sent: Thursday, July 03, 2003 7:05 AM > > Subject: Re: [ISSForum] Proventia ports ? > > > > > > > Is there a list of switches which support OR do not support RSKILL > (don't > > > allow outbound of packages) in case of "port span"? > > > > > > I'm particurarly intersted in Cisco switches, so do they suppot RSKILL > in > > > parallel with "port span" ? > > > > > > ./Mohamed. > > > > > > Mohamed HAMOUCH > > > Mohamed.HAMOUCH (at) cgey.com > > > > > > > > > ----- Original Message ----- > > > From: "Antonio Gomes - Contacta" <[EMAIL PROTECTED]> > > > To: <[EMAIL PROTECTED]> > > > Sent: Monday, June 09, 2003 4:53 PM > > > Subject: Re: [ISSForum] Proventia ports ? > > > > > > > > > > this limitation, if exists, is on switch. Some switchs ports when are > in > > > > "port span" don�t allow outbound of packages, also the RSKILL > > > > > > > > Antonio Gomes > > > > CONTACTA Seguran�a em Conectividade > > > > Fone: +55 21 2253-9349 > > > > Nokia Security Administrator > > > > > > > > ----- Original Message ----- > > > > From: "john greene" <[EMAIL PROTECTED]> > > > > To: <[EMAIL PROTECTED]> > > > > Cc: "Rouland, Chris (ISSAtlanta)" <[EMAIL PROTECTED]> > > > > Sent: Sunday, June 08, 2003 10:54 AM > > > > Subject: [ISSForum] Proventia ports ? > > > > > > > > > > > > > The Proventia has 4 ports. does it have another port > > > > > that is used to connect to the Management station or > > > > > the Site Protector ? > > > > > > > > > > I am connecting one of the port (Port 2 on Proventia) > > > > > to a spanned port on a switch (that has traffic > > > > > mirrored from other vlans). Can this port 2 of > > > > > Proventia send a TCP kill ? > > > > > > > > > > > > > > > __________________________________ > > > > > Do you Yahoo!? > > > > > Yahoo! Calendar - Free online calendar with sync to Outlook(TM). > > > > > http://calendar.yahoo.com > > > > > _______________________________________________ > > > > > ISSForum mailing list > > > > > [EMAIL PROTECTED] > > > > > > > > > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > > > > https://atla-mm1.iss.net/mailman/listinfo > > > > > > > > > > > > > _______________________________________________ > > > > ISSForum mailing list > > > > [EMAIL PROTECTED] > > > > > > > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > > > https://atla-mm1.iss.net/mailman/listinfo > > > > > > > > > > _______________________________________________ > > ISSForum mailing list > > [EMAIL PROTECTED] > > > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > https://atla-mm1.iss.net/mailman/listinfo > > > > _______________________________________________ > > ISSForum mailing list > > [EMAIL PROTECTED] > > > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > https://atla-mm1.iss.net/mailman/listinfo > > > > _______________________________________________ > ISSForum mailing list > [EMAIL PROTECTED] > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > https://atla-mm1.iss.net/mailman/listinfo > � > > _______________________________________________ > ISSForum mailing list > [EMAIL PROTECTED] > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > https://atla-mm1.iss.net/mailman/listinfo > IMPORTANT - THIS E-MAIL AND THE INFORMATION THAT IT CONTAINS, MAY BE > CONFIDENTIAL, LEGALLY PRIVILEGED AND PROTECTED BY LAW. ACCESS BY THE > INTENDED RECIPIENT ONLY IS AUTHORISED. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy the > information onto any medium. Copyright in this e-mail and its attachments > belongs to EDS South Africa (Pty) Ltd. > _______________________________________________ > ISSForum mailing list > [EMAIL PROTECTED] > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo > _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
