Jim Scharp wrote: > I am considering deploying a G2000 which will eventually go inline but will > probably start in passive IDS mode. In the interim, is it possible to deploy > it to passively monitor a full duplex network segment with a standard > NetOptics network tap? It seems to me that it must be possible for the > appliance to accept each of the two cables from the tap and perform some > intelligent re-ordering and aggregation of those streams in such a way that > packets avoid being dropped. Am I understanding this problem correctly and > if so, is this functionality built into the appliance? > > Incidentally, I've looked at various aggregation taps on the market, but > since they aggregate all traffic onto one wire, then they can't handle more > than 1Gbps into the IDS -- whereas a full-duplex link could be up to 2Gbps > max theoretical. > > Thanks for any insight, Jim.
That's how we're running our two G1000s in production, and it works just fine. If you need the details on how we connected up the fiber, let me know, and I'll get that for you. Thanks Jonathan _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
