I did not see so far a single box deployed with more than two sensors, listening on 
two different interfaces.
What you could do is have traffic from multiple VLANs spanned into a single port on 
your corporate switch/router, set it up for monitoring the traffic, and plug your 
sensor into that port. You will have only one sensor per see, but that sensor will 
actually monitor traffic on multiple network segments.
BTW, I love Nokia appliances for IDS monitoring. And one can purchase a cheap one, 
like the IP130 and deploy it as a network sensor/a couple of network sensors. The 
beauty is that as long as there is connectivity between the IDS box and the console, 
there is no information stored locally on the IDS box for too long - that's why an 
IP130 can do the trick.

Regards,

Jaroslav
_______________________________________________
ISSForum mailing list
[EMAIL PROTECTED]

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo

Reply via email to